View source for Authentication Flow

{{Merge|Current login protocols}}
{{OSWikiLearnBox|parent=Protocol}}

== Protocol Step-by-step ==

=== Step 1 ===
Viewer(client)--------->User Server
* Secure Message checksum request - Protocol Level Supported? Yes/No.
* Port 12036

=== Step 2 ===
Viewer -----------> Login Server

* XML-RPC Func call - over HTTPS. to login. (Blocking) [[http://www.libsecondlife.org/wiki/Login#Client_XML-RPC_Request_.28Encapsulated_in_TLS_1.0.29][Login Info from libsecondlife]
* Mostly a web server (Apache) that talks to a SQL DB. Gets user info from DB (home. etc.) gets the info about which sim to connect to (IP address etc.) and drops the connection.
*  First name, last name, MD5(password), viewer version, requested location

=== Step 3 ===
Login Server ------> Database

Checks actual database for authentication credentials

=== Step 4 ===
Login Server------> SIM in the Grid

*  Login server decides which SIM to send the viewer to. talks to Grid  
*  Requests session start

Grid (of Simulators):
*  inbound UDP port (for comm. with Viewer) 12035, 13000-13050

=== Step 5 === 
SIM ---->  Login server  (response)
*  Verification that user is allowed on the SIM

=== Step 6 ===
Login server ------> Viewer (response)

* Information returned:  agent id, session id, secure session id, sim ip, sim port, global location, some inventory info.
* Most IDs are UUIDs (agent id, session id, and secure session id, for example)
* Agent ID == User ID Unique and Persistent.

=== Step 7 ===
Viewer ------->  Simulator (on Grid)
Handshake 
*  Viewer sends user id and session id

=== Step 8 ===
Viewer ------->   User server
User server handshake
*  Sent for presence information so Group IM works 
*  Confers group rights to user
*  User server verifies the SIM session info via DB Presence-Agent table.(initially committed by the Login Server at the time of Sim-LoginSERVER negotiation) Step p3

[[Category: AW Groupies]]