Hi,

Is there a way to disable caching of the "Authorization: Basic XXXX"
credentials?  This is for an internet appliance cut-through authentication
feature which uses WWW-Authenticate.  After replying with WWW-Authenticate,
and the client resends its GET request including the authorization
credentials, I would like to be able to direct the client not to cache
those credentials.  I've tried using Cache-control: no-cache, but that
doesn't seem to help.  In other words, I would like the client to send
me the "Authorization: Basic XXXX" string containing the username
and password in only the first GET request following the WWW-Authenticate
response, but don't include that in any subsequent requests to the
same server.  Is there a way to do this?

Thanks and Regards,
Paul Del Fante

Reply via email to