Re: Regarding http basic authentication in haproxy

[Willy Tarreau]

On Fri, May 13, 2016 at 08:38:50AM +1000, Igor Cicimov wrote:
> On 13 May 2016 4:19 am, "bln prasad"  wrote:
> >
> > Hi,
> >   I've setup basic http authentication in the frontend. I'm finding that
> it's asking for authentication for first time only when i access from the
> browser. Once it succeeds it's alway bypasses authentication even if i
> access it from other tabs or  re access from sam tab.
> >
> > Is it expected?
> 
> Yes it is expected
> 
> If yes then can you please let me know how do i force authentication on
> every new tab or from same tab.
> >
> 
> Only way is to close the browser. Nothing specific to haproxy thats how the
> basic auth works.

And to go further, this point was discussed 1 or 2 years ago on the HTTP
working group at the IETF with the browser people (eg: have a button to
make the browser forget the credentials) and from what I remember it's
not easy to do without adding a certain level of confusion to the user.
And that's in part why basic auth is rarely used nowadays...

Willy

Re: Regarding http basic authentication in haproxy

[Igor Cicimov]

On 13 May 2016 4:19 am, "bln prasad"  wrote:
>
> Hi,
>   I've setup basic http authentication in the frontend. I'm finding that
it's asking for authentication for first time only when i access from the
browser. Once it succeeds it's alway bypasses authentication even if i
access it from other tabs or  re access from sam tab.
>
> Is it expected?

Yes it is expected

If yes then can you please let me know how do i force authentication on
every new tab or from same tab.
>

Only way is to close the browser. Nothing specific to haproxy thats how the
basic auth works.

> Thanks,
> BLN

Regarding http basic authentication in haproxy

[bln prasad]

Hi,
  I've setup basic http authentication in the frontend. I'm finding that
it's asking for authentication for first time only when i access from the
browser. Once it succeeds it's alway bypasses authentication even if i
access it from other tabs or  re access from sam tab.

Is it expected? If yes then can you please let me know how do i force
authentication on every new tab or from same tab.

Thanks,
BLN