Home/ Questions/Q 8943687
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-15T11:50:28+00:00

I wrote a set of APIs which will consider you authenticated if you logged

  • 0

I wrote a set of APIs which will consider you authenticated if you logged on the website (and therefore you have your cookies set).

I then wrote a Greasemonkey and a Google Chrome plugin that does different calls to my api/* calls. However, Ajax doesnt send cookie header over cross domain (remember it is plugin that is enabled when you are on facebook).

What are the best strategies to authenticate my user and authorize his api calls?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team
    GM_xmlhttpRequest

    indeed does an AJAX-call and sends the cookie header.
    You can therefore simply call a website that returns the authentification status based on visitors cookies, return a simple result and use it.

    Example

    GM_xmlhttpRequest({ 
method: "GET",  
     url: "http://yourwebsite/loggedin.php",    
     onload: function(resp) {
     var conti=resp.responseText;
     loggedin = parseInt(conti); //let the webpage return 1 or 0
    • 0