在Mac OS X首选项窗格应用程序和php5 Web应用程序之间进行通信

Question

Wondering what the best method is for communicating between a 10.5/10.6+ System Preference Pane application to our php5 web application.

The Preference Pane application that we've yet to develop will allow the client to authenticate to our online services, then allow them to control how their local client is backed up to our online backup facilities.

Such far, for example; we've created a testing Preference Pane app that takes the username & password, performs a sha256 hash of the password and POSTS it to an URL like: https://development.private/app.php?username=cleartext&password=sha256hash - once our application responds correctly, the Preference Pane application then pushes all options enabled/disabled via further POSTS calls like: https://development.private/app.php?option1=enable&option2=something .

So the questions are: What is the best way to authenticate the user to our online services? Should we be sending some type of hash token from our web app to the Preference Pane application? and is performing HTTPS POSTS between the two applications the best way to handle this type of communication?

Answer 1

是的，可以将Web应用程序中的令牌发送回首选窗格，即使用sessions ，但是考虑到无论如何您都在使用安全连接，我不会打扰，只需将用户的凭据与每个请求一起发送，在POST数据中（app.php？user = ...＆password = ...＆data = ...），或者更好的是在请求标头中（请参见http://en.wikipedia.org/wiki/Digest_access_authentication ） 。