How do I implement cross authentication?

[slappyjam]

How do I implement cross authentication with ZenCart?

I have a custom app that I wrote and I want to be able to share authentication between the sites. In other words I want to be able to sign into zencart and be able to securely navigate to my custom site without having to log in.

I looked into using php sessions but it seems that there is a layer in the code that puts all the session information in the database.

Has anyone else out there tried this? Could someone point me in the right direction?

[kobra]

Cross site authentication??

Does not seem plausible

[slappyjam]

Why not?

The initial idea I had was to basically keep the data between the applications synchronized in the database (basically keeping the users table sync'd) and hacking the code a bit to pass some session variables over to my app. That way we could keep records in my app associated with the same user that's logged into ZenCart.

It's just that I'm not familiar with the way in which sessions are used/stored in ZenCart.

[stevesh]

It's just that I'm not familiar with the way in which sessions are used/stored in ZenCart.

Neither am I, but similar questions have been asked in the past, and there seem to be security problems with 'bridging' other sites' logins to Zencart or vice-versa.

My guess is that one issue would be that the implications of a security breach for an ecommerce site are much more serious than for, say, a forum or blog site.