RE: allow general access after 1 auth

2023-08-12 Thread Marc
I am blind, thought I wrote to the apache list, thanks



> 
> This has nothing to do with SpamAssassin. Maybe you'll find better
> responses somewhere focused on web server stuff...
> 
> 
> On 2023-08-12 at 11:13:29 UTC-0400 (Sat, 12 Aug 2023 15:13:29 +)
> Marc 
> is rumored to have said:
> 
> > I was wondering if it is possible to allow general access to an url
> > after some account authenticated for this url. Without the necessity
> > to adapt the web application for this
> >
> > Say we have closed https://www.example.com/webapp with something like
> > Require valid-user
> > Order deny,allow
> > Deny from all
> >
> > If someone authenticates on https://www.example.com/webapp, the url is
> > available for everyone.
> >
> > Some inactivity timeout should lock the url again.
> 
> 
> --
> Bill Cole
> b...@scconsult.com or billc...@apache.org
> (AKA @grumpybozo and many *@billmail.scconsult.com addresses)
> Not Currently Available For Hire


Re: allow general access after 1 auth

2023-08-12 Thread Bill Cole
This has nothing to do with SpamAssassin. Maybe you'll find better 
responses somewhere focused on web server stuff...



On 2023-08-12 at 11:13:29 UTC-0400 (Sat, 12 Aug 2023 15:13:29 +)
Marc 
is rumored to have said:

I was wondering if it is possible to allow general access to an url 
after some account authenticated for this url. Without the necessity 
to adapt the web application for this


Say we have closed https://www.example.com/webapp with something like
Require valid-user
Order deny,allow
Deny from all

If someone authenticates on https://www.example.com/webapp, the url is 
available for everyone.


Some inactivity timeout should lock the url again.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


allow general access after 1 auth

2023-08-12 Thread Marc


I was wondering if it is possible to allow general access to an url after some 
account authenticated for this url. Without the necessity to adapt the web 
application for this

Say we have closed https://www.example.com/webapp with something like
Require valid-user
Order deny,allow
Deny from all

If someone authenticates on https://www.example.com/webapp, the url is 
available for everyone. 

Some inactivity timeout should lock the url again.