Closed (fixed)
Project:
HTTP authentication
Version:
5.x-1.x-dev
Component:
Code
Priority:
Normal
Category:
Bug report
Assigned:
Reporter:
Created:
8 May 2007 at 17:58 UTC
Updated:
4 May 2008 at 15:12 UTC
Because of the following checks introduced in Drupal 5:
function sess_read($key) {
...
// Handle the case of first time visitors and clients that don't store cookies (eg. web crawlers).
if (!isset($_COOKIE[session_name()])) {
$user = drupal_anonymous_user();
return '';
}
..
}
function sess_write($key, $value) {
...
// If the client doesn't have a session, and one isn't being created ($value), do nothing.
if (empty($_COOKIE[session_name()]) && empty($value)) {
return TRUE;
}
...
}
cookie-less authentication doesn't work when caching is enabled.
Comments
Comment #1
decafdennis commentedIt is no longer (or shouldn't be) necessary to do a redirect, so we don't need to pass the session ID by cookie nor by query string anymore.
Therefore this bug has been fixed.
Comment #2
Anonymous (not verified) commentedAutomatically closed -- issue fixed for two weeks with no activity.