Log-in dialog displayed on public page after log-out

superduperdan - June 10, 2009 - 18:34
Project:Secure Site
Version:5.x-1.5
Component:Code
Category:bug report
Priority:normal
Assigned:Unassigned
Status:closed
Description

The issue discussed here, http://drupal.org/node/103268 doesn't seem to be resolved for version 1.5. I don't believe there is a patch or fix for this version yet. Still have the same issue with version 1.5. Is there a patch available?

Dan

#1

Junyor - June 11, 2009 - 00:04

The fix for that issue is included in 5.x-1.5. Would you please provide a step-by-step method of reproduction for the issue you're seeing?

#2

superduperdan - June 11, 2009 - 03:19

Well I'm definitely using 5.x-1.5. Basically the exact same issue as the subjects suggests and the discussion in the link above I posted. I can login just fine with any of the accounts created. When I logout I get the login dialog popup. Logout link path is index.php?q=logout. Nothing in the watchdog regarding. Using HTTP Auth.

#3

Junyor - June 11, 2009 - 04:15

You're logging in on an unprotected page? Are you logging out on an unprotected page, too? Which pages are protected and are you using the white list or the black list?

#4

superduperdan - June 11, 2009 - 22:24

http://www.olivelovers.com/admin/

Every page is protected. Not sure what you mean about black list and white list.

#5

Junyor - June 12, 2009 - 00:41

If every page is protected, you should expect to see the auth dialog on logout. However, that doesn't seem to be the case since http://www.olivelovers.com is unprotected. How about a screenshot of the Secure Site settings page?

#6

Darren Oh - June 12, 2009 - 01:35

I believe it is necessary to show the log-in dialog in order to get the browser to stop sending log-in credentials. We have done a number of browser-specific tweaks so that the user only needs to see the log-in dialog once after logging out, but if it is not shown at all, the user cannot log out.

If a user cancels the log-in dialog, it should stop being displayed on public pages. Please close this issue if that is what happens.

#7

superduperdan - June 12, 2009 - 19:28

Screencap as requested

AttachmentSize
Secure Site - Drupal.png 60.31 KB

#8

Junyor - June 13, 2009 - 01:47
Status:active» closed

Based on those settings, you should expect to get an HTTP Auth dialog any time you logout. #103268: Log-in dialog is displayed on public page after log-out is about sites with some pages not protected by Secure Site.

 
 

Drupal is a registered trademark of Dries Buytaert.