Page 1 of 1

Data from Ajax for authorised users only

Posted: Thu Mar 20, 2014 4:18 am
by hjkl
In my application authorised users should be able to recieve specific data from server via Ajax. However, unauthorised users must not be able to recieve this data.

Authorised users are loged in with session. However, when making Ajax call, server cannot check this session. I can send only user's ID, but it doesnt help making sure that this user knows username and password.

How can I make sure only authorised users get access to this data via Ajax?

Re: Data from Ajax for authorised users only

Posted: Thu Mar 20, 2014 8:47 am
by Celauran
Persist login tokens and include them in the request?