Take the tour ×

I am trying to see various methods i can add to provide basic security in my Ajax requests: I am running the Apache server and application is build in django.

1) Use HTTP Authentication (Basic/Digest/NTLM) 2) Use Session based auth. in the application.

The first one seems to be more convenient, however i don't understand the intend of it.

Since it is a HTTP Authentication and done by Apache, it won't(should not) have access to the user credential stored in the mysql database. for all my user i have to use the same login and password and that will be embedded in the java script sent to the user (so that user don't have to remember two different set of login and password -one for the application , other for the HTTP Auth). My question is what is the use case scenirio for the "HTTP based Auth",specially for web applications. Is there any way to connect Apache to django for Auth purposes?

share|improve this question
add comment


Your Answer



Browse other questions tagged or ask your own question.