https://issues.apache.org/bugzilla/show_bug.cgi?id=56326

Edward Lu <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #31449|0                           |1
        is obsolete|                            |

--- Comment #1 from Edward Lu <[email protected]> ---
Created attachment 31450
  --> https://issues.apache.org/bugzilla/attachment.cgi?id=31450&action=edit
Revise comment and change doc to clarify why quick handler ignores
Authorization header

Just found this in the doc, caching.html:

"This mode however also bypasses the authentication and authorization phases of
server processing, so this mode should be chosen with care when this is
important.

"Requests with an "Authorization" header (for example, HTTP Basic
Authentication) are neither cacheable nor served from the cache when mod_cache
is running in this phase."

Makes sense - the authorization can't be used by mod_cache if it's not been
processed by the proper authorization stuff yet. My previous patch is not any
good, so here's a patch revising the comment that originally confused me and
makes the statements above a little more visible (at least the way I was
looking through the docs).

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to