On Fri, May 13, 2016 at 08:38:50AM +1000, Igor Cicimov wrote:
> On 13 May 2016 4:19 am, "bln prasad" wrote:
> >
> > Hi,
> > I've setup basic http authentication in the frontend. I'm finding that
> it's asking for authentication for first time only when i access from the
> browser. Once it succeeds it's alway bypasses authentication even if i
> access it from other tabs or re access from sam tab.
> >
> > Is it expected?
>
> Yes it is expected
>
> If yes then can you please let me know how do i force authentication on
> every new tab or from same tab.
> >
>
> Only way is to close the browser. Nothing specific to haproxy thats how the
> basic auth works.
And to go further, this point was discussed 1 or 2 years ago on the HTTP
working group at the IETF with the browser people (eg: have a button to
make the browser forget the credentials) and from what I remember it's
not easy to do without adding a certain level of confusion to the user.
And that's in part why basic auth is rarely used nowadays...
Willy