X-Git-Url: http://git.indexdata.com/?a=blobdiff_plain;f=doc%2Fmkws-manual.markdown;h=fc345d65c1153ff4782186edf4d2d8ce0144e388;hb=da52ec6fe36442fe3e01ec1719dfcc7e5b94c72b;hp=6cd131b91e8a61e7de40a7e03a304d858c5e7e02;hpb=ffe353360305f0082ae56f506ac309678c775d0d;p=mkws-moved-to-github.git diff --git a/doc/mkws-manual.markdown b/doc/mkws-manual.markdown index 6cd131b..fc345d6 100644 --- a/doc/mkws-manual.markdown +++ b/doc/mkws-manual.markdown @@ -398,6 +398,14 @@ of this hostname to your library by setting the User Access record's that this is not secure, as other applications can use this virtual hostname to gain access to your library.** +Or if your application's users are coming from a well-known range of +IP-address space, you can enter the range in the "IP Ranges" +field. The format of this field is as follows: it can contain any +number of ranges, separated by commas; each range is either a single +IP address or two addresses separated by a hyphen; each IP address is +four small integers separated by periods. For example, +`80.229.143.255-80.229.143.255, 5.57.0.0-5.57.255.255, 127.0.0.1`. + Alternatively, your application can authenticate by username and password credentials. This is a useful approach in several situations, including when you need to specify the use of a different library from @@ -405,14 +413,17 @@ usual one. To arrange for this, set the username and password as a single string separated by a slash -- e.g. "mike/swordfish" -- into the User Access record's Authentication field. -You can create multiple User Access records: for example, one that -uses Referring URL, and another that uses a username/password pair to -be used when running an application from a different URL. +You can set multiple fields into a single User Access record; or +create multiple User Access records. For example, a single User Access +record can specify both a Referring URL a username/password pair that +can be used when running an application from a different URL. But if +multiple Referring URLs are needed, then each must be specified in its +own User Access record. ### Tell the application to use the library In the HTML of the application, tell MKWS to authenticate on to the -Service Proxy. When IP-based, referer-based or hostname-based +Service Proxy. When referer-based, hostname-based or IP-based authentication is used, this is very simple: