Re: Basic Authentication & logout

2005-06-24 Thread Dan Wilga
At 5:15 PM +0200 6/22/05, Andrea Palmeri wrote: I invalidate the user authencation and ask credentials once again, but I would like to just to invalidate the user authencation whitout prompting the user for credentials. Can't be done with basic auth. They will always get the "Authentication f

Re: Basic Authentication & logout

2005-06-22 Thread Simon Perreault
On Wednesday 22 June 2005 13:32, Adam Prime x443 wrote: > Ideally, you expire the session on the server (ie, in the DB), rather than > by removing the cookie. > > Common hacks people use to remove cookies are setting the expiry in the > past, or to +1s, or simply to put invalid content into the coo

RE: Basic Authentication & logout

2005-06-22 Thread Adam Prime x443
. Adam -Original Message- From: Simon Perreault [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 22, 2005 12:26 PM To: modperl@perl.apache.org Subject: Re: Basic Authentication & logout On Wednesday 22 June 2005 11:15, Andrea Palmeri wrote: > My question is: how do I logout user

Re: Basic Authentication & logout

2005-06-22 Thread Simon Perreault
On Wednesday 22 June 2005 11:15, Andrea Palmeri wrote: > My question is: how do I logout users which have been authenticated ? > (responding to an html link) This is basically impossible. People telling you otherwise are assuming that one browser's quirks are standard.

Re: Basic Authentication & logout

2005-06-22 Thread Chris Croome
Hi On Wed 22-Jun-2005 at 05:15:58PM +0200, Andrea Palmeri wrote: > > My question is: how do I logout users which have been > authenticated ? (responding to an html link) This way of doing it more-or-less works (Opera seems to have problems...): https://wiki.slugbug.org.uk/HTTP_Authentication