[Seaside] Seaside vs Streaming

[Martin Kobetic]

Philippe Marschall wrote:
> WABasicAuthentication would need a completely different implementation
> (no longer a global decoration).

I would even say that any of the HTTP authentication mechanisms should be the HTTP server responsibility, not Seaside's. The HTTP server does need some back-end hookup that will actually verify the provided credentials, but it should handle all the messaging details. For example NTLM authentication takes several message exchanges.

The verification back-end could be either Seaside directly, or a separate module that both the server and Seaside talk to.

Martin