Actions
Bug #4496
closeduser:password authentication (Basic)
Start date:
05/16/2013
Due date:
% Done:
0%
Estimated time:
Description
Problème: comment faire passer un user:password (Basic Authentication) via le browser sans avoir reçu auparavant un code HTTP 401 (Unauthorized). Il semble que ce ne soit pas possible.
Solution: créer une opération (login) qui renvoie directement 401. Dans ce cas il faut gérer la session en stockant user:password dans un cookie par exemple.
Updated by Schwarz Lionel over 11 years ago
- Subject changed from Authentification par user:password (Basic) to user:password authentication (Basic)
Updated by Schwarz Lionel over 11 years ago
- Status changed from New to Resolved
Firefox (and also Chrome) unable to send authorization with the standard URL notation:
http://user:password@host/lavoisier/view
this works fine with cURL.
With FF and Chrome, the user must add the login name in the URL to get the 401 dialog box:
http://host/lavoisier/view?login=username
After the user has successfully logged in, the credential is kept for future navigation within the browser session.
Actions