Closed (fixed)
Project:
Secure Site
Version:
5.x-1.5
Component:
Code
Priority:
Normal
Category:
Bug report
Assigned:
Unassigned
Reporter:
Anonymous (not verified)
Created:
10 Jun 2009 at 18:34 UTC
Updated:
12 Feb 2025 at 18:18 UTC
Jump to comment: Most recent, Most recent file
Comments
Comment #1
junyor commentedThe fix for that issue is included in 5.x-1.5. Would you please provide a step-by-step method of reproduction for the issue you're seeing?
Comment #2
Anonymous (not verified) commentedWell I'm definitely using 5.x-1.5. Basically the exact same issue as the subjects suggests and the discussion in the link above I posted. I can login just fine with any of the accounts created. When I logout I get the login dialog popup. Logout link path is index.php?q=logout. Nothing in the watchdog regarding. Using HTTP Auth.
Comment #3
junyor commentedYou're logging in on an unprotected page? Are you logging out on an unprotected page, too? Which pages are protected and are you using the white list or the black list?
Comment #4
Anonymous (not verified) commentedhttp://www.olivelovers.com/admin/
Every page is protected. Not sure what you mean about black list and white list.
Comment #5
junyor commentedIf every page is protected, you should expect to see the auth dialog on logout. However, that doesn't seem to be the case since http://www.olivelovers.com is unprotected. How about a screenshot of the Secure Site settings page?
Comment #6
darren ohI believe it is necessary to show the log-in dialog in order to get the browser to stop sending log-in credentials. We have done a number of browser-specific tweaks so that the user only needs to see the log-in dialog once after logging out, but if it is not shown at all, the user cannot log out.
If a user cancels the log-in dialog, it should stop being displayed on public pages. Please close this issue if that is what happens.
Comment #7
Anonymous (not verified) commentedScreencap as requested
Comment #8
junyor commentedBased on those settings, you should expect to get an HTTP Auth dialog any time you logout. #103268: Log-in dialog is displayed on public page after log-out is about sites with some pages not protected by Secure Site.