Cross Domain Login – How to log a user in automatically when transferred from one domain to another

Single sign-on (SSO) is conceptually pretty simple. User hits domain1.com. domain1.com sees there’s no session cookie. domain1.com redirects to sso.com sso.com presents login page, and take credentials sso.com sets session cookie for the user sso.com then redirects back to domain1 to a special url (like domain1.com/ssologin) the ssologin URL contains a parameter that is basically … Read more

Can HTML5 databases and localStorage be shared across subdomains?

Update 2016 This library from Zendesk worked for me. Sample: Hub // Config s.t. subdomains can get, but only the root domain can set and del CrossStorageHub.init([ {origin: /\.example.com$/, allow: [‘get’]}, {origin: /:\/\/(www\.)?example.com$/, allow: [‘get’, ‘set’, ‘del’]} ]); Note the $ for matching the end of the string. The regular expression in the above example … Read more

DNS problem, nslookup works, ping doesn’t

It’s possible that the Windows internal resolver is adding ‘.local’ to the domain name because there’s no dots in it. nslookup wouldn’t do that. To verify this possiblity, install ‘Wireshark’ (previously aka Ethereal) on your client machine and observe any DNS request packets leaving it when you run the ping command. OK, further investigation on … Read more

What are the trade-offs between different methods of constructing API URLs: subdomain vs. subdirectory and versioning? [closed]

It depends on your needs. If you use http://api.example.com it makes your API a subdomain. Basically, this URL pattern is good if your REST service is to be consumed by multiple clients, but if only one client is connected to your API then the pattern http://example.com/api/v1 is good. However, if you want to add more … Read more