{{ :blocks:logo-apl.png?nolink |}} ===== Drupal authentication: User guide===== ====Introduction==== There is no direct use of this component, apart from the ability for a user to use an authenticated permalink to land directly on an internal Moodle page under their own identity. For security reasons the ticket has a finite lifetime. Developers relying on this component to generate return links will take care to provide ticket validity durations that offer the best compromise between security and usage needs. ===Example use case:=== When using the shop, when a invoice notification is sent to the customer, the customer can come back to the support course to download their invoice without authenticating with the login/password pair. The system generates a temporary encrypted access token passed, for a temporary validity period, in the body of the sent mail. :!: This entry point should preferably be used over https to avoid any interception. ==== Return address to Moodle ==== Any link to Moodle carrying a "ticket=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX" parameter is potentially a return link by ticket authentication. ---- ==== Credits ==== * Valéry Frémaux (valery@activeprolearn.com) Development * Florence Labord (florence@activeprolearn.com) Documentation [[auth:drupal|Back to the component index]] - [[:Plugins|Back to plugins index]] - [[:start|Back to catalogue]]