CGI::Application::Plugin::Authentication::Store::Cookie 0.12

CGI::Application::Plugin::Authentication::Store::Cookie is a Cookie based Store.

SYNOPSIS

use base qw(CGI::Application);
use CGI::Application::Plugin::Session;
use CGI::Application::Plugin::Authentication;

__PACKAGE__->authen->config(
STORE => [Cookie, SECRET => "Shhh, dont tell anyone", NAME => CAPAUTH_DATA, EXPIRY => +1y],
);

This module uses a cookie to store authentication information across multiple requests. It works by creating a cookie that contains the information we would like to store (like the name of the user that is currently authenticated), and then base64 encoding the data. In order to ensure that the information is not manipulated by the end-user, we include a CRC checksum that is generated along with our secret. Since the user does not know the value of the secret, they will not be able to recreate the checksum if they change some of the values, so we will be able to tell if the information in the cookie has been manipulated.