Log-in dialog displayed on public page after log-out
superduperdan - June 10, 2009 - 18:34
| Project: | Secure Site |
| Version: | 5.x-1.5 |
| Component: | Code |
| Category: | bug report |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | closed |
Description
The issue discussed here, http://drupal.org/node/103268 doesn't seem to be resolved for version 1.5. I don't believe there is a patch or fix for this version yet. Still have the same issue with version 1.5. Is there a patch available?
Dan

#1
The fix for that issue is included in 5.x-1.5. Would you please provide a step-by-step method of reproduction for the issue you're seeing?
#2
Well I'm definitely using 5.x-1.5. Basically the exact same issue as the subjects suggests and the discussion in the link above I posted. I can login just fine with any of the accounts created. When I logout I get the login dialog popup. Logout link path is index.php?q=logout. Nothing in the watchdog regarding. Using HTTP Auth.
#3
You're logging in on an unprotected page? Are you logging out on an unprotected page, too? Which pages are protected and are you using the white list or the black list?
#4
http://www.olivelovers.com/admin/
Every page is protected. Not sure what you mean about black list and white list.
#5
If every page is protected, you should expect to see the auth dialog on logout. However, that doesn't seem to be the case since http://www.olivelovers.com is unprotected. How about a screenshot of the Secure Site settings page?
#6
I believe it is necessary to show the log-in dialog in order to get the browser to stop sending log-in credentials. We have done a number of browser-specific tweaks so that the user only needs to see the log-in dialog once after logging out, but if it is not shown at all, the user cannot log out.
If a user cancels the log-in dialog, it should stop being displayed on public pages. Please close this issue if that is what happens.
#7
Screencap as requested
#8
Based on those settings, you should expect to get an HTTP Auth dialog any time you logout. #103268: Log-in dialog is displayed on public page after log-out is about sites with some pages not protected by Secure Site.