[dev.icinga.com #1005] HTTP-Auth: Logout should be possible

[icinga-migration]

This issue has been migrated from Redmine: https://dev.icinga.com/issues/1005

Created by tgelf on 2010-11-15 15:07:54 +00:00

Assignee: mhein
Status: Resolved (closed on 2012-01-25 14:45:27 +00:00)
Target Version: 1.6.2
Last Update: 2012-02-14 16:40:34 +00:00 (in Redmine)

---

That's a tricky one, as there is no way to perform a clean HTTP-Auth "logout". You could either try to redirect to http://whatever@icinga/icinga-web/ (afaik no longer possible with IE) or you could emulate the expected user experience by doing as follows:

header('WWW-Authenticate: Basic realm="Icinga Access"');
header('HTTP/1.0 401 Unauthorized');

Not sure whether this shall be a bug or a feature request - however the current behaviour is not what a user would expect when he clicks on "Logout".

Changesets

2012-01-25 14:20:12 +00:00 by mhein e322d3e

* HTTP logout feature (NOT FOR EVERY BROWSER) (fixes #1005)

2012-01-26 10:43:29 +00:00 by mhein 39e8ae3

* Fixed configuration chaos (fixes #2233)
* Fixed logout redirect if no HTTP_Basic (fixes #1005)

[icinga-migration]

Updated by jmosshammer on 2011-09-26 15:43:10 +00:00

• Category set to Authorization
• Target Version set to 1.7

[icinga-migration]

Updated by mhein on 2012-01-25 11:37:20 +00:00

• Assigned to set to mhein

[icinga-migration]

Updated by mhein on 2012-01-25 14:45:27 +00:00

• Status changed from New to Resolved
• Done % changed from 0 to 100

Applied in changeset e322d3e.

[icinga-migration]

Updated by mhein on 2012-02-14 16:40:34 +00:00

• Target Version changed from 1.7 to 1.6.2