[APLO-83] Apollo REST API should support cookie/session based authentication

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.0-beta5
• Component/s: apollo-web
• Assignee: Hiram R. Chirino
• Reporter: Hiram R. Chirino
• Created: 26/Aug/11 03:10
• Updated: 26/Aug/11 03:10
• Resolved: 26/Aug/11 03:10

Description

The rest API should support the following routs:

/signin : to pass user/password credentials and establish a session maintained via cookies
/signout : to invalidate the session
/whoami : to query what the principals associated with the logged in session.

Also if the "AuthPrompt:false" http header is included in the request, then an unauthorized response should not include the "WWW-Authenticate" header to avoid prompting the user via basic auth.