> On Thu, Sep 17, 2009 at 18:37, Bertrand Delacretaz > <[email protected]> wrote: >> So does that mean that forcing authentication to happen on / using the >> "ugly" built-in browser credentials dialog works on all current >> browsers? For user-initiated as well as XHR requests?
On Thu, Sep 17, 2009 at 7:00 PM, Alexander Klimetschek <[email protected]> wrote: > Yes. That would be plain HTTP basic auth... if that does not work it > can be considered a real browser bug. Are you sure about the XHR request part? That's not my experience with Safari, it won't send the Authentication header on subsequent requests if not explicitly asked for it (by the server sending WWW-Authenticate) on every request. I'll see if I can come up with some steps to reproduce it. -- Vidar S. Ramdal <[email protected]> - http://www.idium.no Sommerrogata 13-15, N-0255 Oslo, Norway + 47 22 00 84 00 / +47 21 531941, ext 2070
