Is there any plan to add cookie based authentication?

[kumardeo]

I would be great if we have built-in option to authenticate using cookies.

[mathieucarbou]

I would be great if we have built-in option to authenticate using cookies.

You mean Http session ?

Currently there is no Cookie or HttpSession class to represent these concepts, but you can manually read cookies and develop that yourself: there are examples in the project as a starting point for that.

[kumardeo]

You mean Http session ?

Yes

you can manually read cookies and develop that yourself: there are examples in the project as a starting point for that.

Thanks, I shall look into it.

Is there any plan to add such functionality to library?

[mathieucarbou]

Is there any plan to add such functionality to library?

No: not in the current state of the library. Maybe in a future main version. The reason is that HTTP sessions are stateful, require storage (memory, disk, etc), can be identified in a different ways (cookies, header, token, etc) and require an invalidation mechanism.

All these would had considerable amount of flash space and heap space to the library, when only a few people do really need it.

There are ways to handle sessions without state (usually the kind of thing used in REST APIs). And for that you do not need HTTP session concept neither Cookie concept implemented in ESPAsyncWS. You can do that bay looking at headers, tokens, cookies yourself in a middleware and attach objects in request attributes loaded from somewhere (like a user id).

[kumardeo]

I understand, thanks 🙏.