[
http://jira.magnolia-cms.com/browse/MGNLRSSAGG-31?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jan Haderka updated MGNLRSSAGG-31:
----------------------------------
Fix Version/s: 1.x
(was: 1.1.1)
> Protected feeds should be protected via Basic authentication
> ------------------------------------------------------------
>
> Key: MGNLRSSAGG-31
> URL: http://jira.magnolia-cms.com/browse/MGNLRSSAGG-31
> Project: Magnolia RSS Aggregator Module
> Issue Type: Bug
> Affects Versions: 1.1
> Environment: Safari 4, Mac OSX
> Reporter: Jan Haderka
> Assignee: Jan Haderka
> Fix For: 1.x
>
>
> ... since rss clients can't fill in the html form rendered by
> {{FormClientCallback}}. For instance, Safari 4 hangs when trying to retrieve
> feeds generated by the RSS Aggregator, and of one uses an external rss
> client, it will fail to register the feed with a 401, not showing a
> username/password box, since all it gets is indeed a 401 and the
> FreeMarker-rendered login page.
> This happens when authentication is needed to access the resource; on
> windows, it seems that this only shows up if the user previously logs out
> from Magnolia, while on osx, it's more obvious, as apparently the session
> cookie is not shared.
> If one changes the authentication callback to {{BasicClientCallback}}, then
> it all works as expected.
> The default uriSecurity callbacks should probably use a pattern delegating
> (as setup by demo-project for instance), so that other modules could insert
> their own configuration too. (WebDAV would be a candidate, since it currently
> replaces the {{URISecurityFilter}} for the same purposes)
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.magnolia-cms.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
----------------------------------------------------------------
For list details see
http://www.magnolia-cms.com/home/community/mailing-lists.html
To unsubscribe, E-mail to: <[email protected]>
----------------------------------------------------------------
