From a1065793018a75cf6212ba9cb13815e3e22670cc Mon Sep 17 00:00:00 2001
From: erickson <erickson@dcc99617-32d9-48b4-a31d-7c20da2025e4>
Date: Thu, 8 May 2008 17:58:24 +0000
Subject: [PATCH] removed hard-coded expire time on ses cookie, setting ses
 cookie when reading it from the url

git-svn-id: svn://svn.open-ils.org/ILS/branches/acq-experiment@9538 dcc99617-32d9-48b4-a31d-7c20da2025e4
---
 .../web/oilsweb/oilsweb/templates/oils/default/header.html     | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/Open-ILS/web/oilsweb/oilsweb/templates/oils/default/header.html b/Open-ILS/web/oilsweb/oilsweb/templates/oils/default/header.html
index 10a85264ca..ce67b06bf7 100644
--- a/Open-ILS/web/oilsweb/oilsweb/templates/oils/default/header.html
+++ b/Open-ILS/web/oilsweb/oilsweb/templates/oils/default/header.html
@@ -11,9 +11,12 @@
         <span id='oils-base-header-auto-login'>${_('Auto-login is enabled')}</span>|
         <script src='/opac/common/js//Cookies.js'> </script>
         <script>
+            dojo.require('dojo.cookie');
             dojo.require('openils.User');
             dojo.require('openils.Event');
-            var authtoken = '${c.oils.core.authtoken.value}';
+            dojo.require('openils.CGI');
+
+            var authtoken = dojo.cookie('ses') || new openils.CGI().param('ses');
             var username = '${pylons.config.get("oils_demo_user")}';
             var password = '${pylons.config.get("oils_demo_password")}';
             var user;
@@ -28,8 +31,7 @@
                     login:true
                 });
                 user.getBySession();
-                dojo.require('dojo.cookie');
-                dojo.cookie('ses', user.authtoken, {expires:1});
+                dojo.cookie('ses', user.authtoken);
             }
 
             if(authtoken) {
@@ -37,6 +39,8 @@
                 var res = user.getBySession();
                 if(openils.Event.parse(res)) 
                     dologin();
+                else /* in case we got the ses from the URL */
+                    dojo.cookie('ses', user.authtoken);
             } else {
                 dologin();
             }
-- 
2.11.0