inhabitedtype / ocaml-session Goto Github PK

I require the following PR #22 to build with Multicore OCaml 4.10. Can you please make a newer release ocaml-session.0.4.2, so that it does not depend on nocrypto? Thanks!

I created a library ocaml-cookie that is not tied to any web implementation and could work with both httpaf and cohttp. Would you be interested in a implementation for it in this repo?

You can see that I have the implementation pretty much ready to go in my repo already.

Hi,

There's OCaml Redis client library, so it would be trivial to add Redis backend for sessions.

ocaml-ci builds examples but nobody tells it about the dependencies it needs. Not sure how to fix this. @talex5 do you have any suggestions?

On the suggestion of @edwintorok on the mailing list, implement a signed cookie backend that uses the client to store all session data. Verify that the session data hasn't been tampered with by signing the session data before sending it to the client. Examples of this include:

• Secure Cookie from Werkzeug;
• Cookie-based sessions from Django;
• and the itsdangerous Python library.

@tizoc also mentioned that he has implemented this and included the implementation in a gist, which could hopefully be the basis for the implementation of a secure cookie backend for this project.

https://github.com/darioteixeira/pgocaml/ is 99% pure OCaml (with the remaining 1% to be done very soon)