On Fri, May 13, 2016 at 08:38:50AM +1000, Igor Cicimov wrote: > On 13 May 2016 4:19 am, "bln prasad" <prasad....@gmail.com> wrote: > > > > Hi, > > I've setup basic http authentication in the frontend. I'm finding that > it's asking for authentication for first time only when i access from the > browser. Once it succeeds it's alway bypasses authentication even if i > access it from other tabs or re access from sam tab. > > > > Is it expected? > > Yes it is expected > > If yes then can you please let me know how do i force authentication on > every new tab or from same tab. > > > > Only way is to close the browser. Nothing specific to haproxy thats how the > basic auth works.
And to go further, this point was discussed 1 or 2 years ago on the HTTP working group at the IETF with the browser people (eg: have a button to make the browser forget the credentials) and from what I remember it's not easy to do without adding a certain level of confusion to the user. And that's in part why basic auth is rarely used nowadays... Willy
