Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Logout-action fails when logged in through basic http authentication.

#54

Hi.

I have a stage-server that is password protected via basic http authentication. The password and username for the .htaccess-protection is the same as for the restful-authentication. I'm not sure if the problem arises from the passwords and usernames are the same, or that the restful-authentication simply doesn't logout the user when logged in through basic http authentication.

Reported by Emuen · June 12th, 2009 @ 12:11 PM

State: new
Milestone: none
Assigned to: mrflip mrflip

Activity

  1. dondarone
    dondarone
    • Assigned user cleared.

    I can confirm this issue.

    Using request_http_basic_authentication as default response by overwriting access_denied, I can not logout anymore. After reverting that change, it works again.

    This was in a test environment on mongrel without any .htaccess authentication.

    August 2nd, 2009 @ 09:10 AM

  2. Satya
    Satya
    • Assigned user set to mrflip

    We too have the same problem

    August 31st, 2010 @ 09:13 AM

  3. Satya
    Satya

    One way to fix this is to disable "basic http authentication" completely

    But we needed this for good user experience during Ajax actions, so we enabled this authentication only for ajax actions

    def login_from_basic_auth
  **return false unless request.xhr?**
  authenticate_with_http_basic do |login, password|
    self.current_user = User.authenticate(login, password)
  end
end

    August 31st, 2010 @ 09:48 AM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.