README
1 -------------------
2 Authen::Ticket 0.02
3 -------------------
4
5Authen::Ticket provides the framework for implementing a ticketing system
6for web authentication. Both the client website and ticket server code
7can be constructed from Authen::Ticket. The current version requires
8cookies to operate correctly.
9
10The framework allows for customization at all phases in the process. This
11includes not only the login screens, but the cookie creation and optional
12digital signature algorithm as well.
13
14The ticket signature code (Authen::Ticket::Signature) allows for
15signature creation and verification of tickets as well as a handler to
16provide a key server.
17
18The Authen::Ticket::Server class will work with either CGI or CGI::WeT.
19With CGI::WeT installed, the pages presented will have a similar appearance
20to the rest of the website using CGI::WeT without modifying the sub-class
21of Authen::Ticket::Server. This is only true with CGI::WeT version 0.71
22or greater.
23
24The code is split into four components:
25
26 Authen::Ticket mod_perl handler for both server and client
27 Authen::Ticket::Server base ticket server code
28 Authen::Ticket::Client base ticket client code
29 Authen::Ticket::Signature base code for providing signed tickets
30
31To install, simply type
32
33 $ perl Makefile.PL
34 $ make
35 $ make install
36
37The following module dependencies exist:
38
39Module Authen::Ticket ::Server ::Client ::Signature
40------ -------------- -------- -------- -----------
41Apache X
42Apache::File X
43Apache::URI X
44
45Carp X X
46CGI X
47CGI::Cookie X X
48
49MIME::Base64 X X
50OpenSSL X
51
52----
53BUGS
54----
55
56o Tickets must not expire during a POST. This will cause all POST
57 data to be lost.
58