XWiki Platform

Authentication page showed in the comments/annotations/history panels

Details

  • Type: Bug Bug
  • Status: Closed Closed
  • Priority: Major Major
  • Resolution: Won't Fix
  • Affects Version/s: 3.0 RC1
  • Fix Version/s: None
  • Component/s: Authentication
  • Labels:
    None
  • Environment:
    myxwiki.org
  • keywords:
    authentication
  • Difficulty:
    Unknown
  • Similar issues:
    XWIKI-9126Show panel only if the user has the view right on the panel page
    XWIKI-4882Use configured authenticator for WebDAV
    XWIKI-1132New App Server trusted authentication service
    XWIKI-6502Inconsistency in Tag Cloud Panel
    XWIKI-1794Improve panel printing in page.
    XWIKI-8382NewPage Panel doesn't work anymore
    XWIKI-710Navigation pane shows incorrectly in Vista / IE 7
    XWIKI-6873Backlinks Panel doesn't work nice for WebHome
    XWIKI-7333"Show annotations" not saved on a page.
    XWIKI-8357Stats panel showing velocity in the Panel Wizard

Description

I'm forced to loggin twice to see the comments/history/etc...
Check the screenshot.

Activity

Ascending order - Click to sort in descending order
Hide
Permalink
Andreas Jonsson added a comment -

I have looked at this, but can't figure out what would be wrong. Could an AJAX request be sent to a different URL, if the server has several aliases? Could it be a browser issue?

Show
Andreas Jonsson added a comment - I have looked at this, but can't figure out what would be wrong. Could an AJAX request be sent to a different URL, if the server has several aliases? Could it be a browser issue?
Hide
Permalink
Sergiu Dumitriu added a comment -

This happens when using basic authentication. XHR requests don't send the Authorization header by default, they repeat when getting back a 401 response without a body. But XWiki does send a body (the login form) if basciauth=1 is not present in the request, so the request is not re-sent, the login form is displayed instead.

If the wiki is supposed to use basic authentication, then make sure you enable xwiki.authentication=basic in xwiki.cfg.

Show
Sergiu Dumitriu added a comment - This happens when using basic authentication. XHR requests don't send the Authorization header by default, they repeat when getting back a 401 response without a body. But XWiki does send a body (the login form) if basciauth=1 is not present in the request, so the request is not re-sent, the login form is displayed instead. If the wiki is supposed to use basic authentication, then make sure you enable xwiki.authentication=basic in xwiki.cfg .
Hide
Permalink
Sergiu Dumitriu added a comment -

Basic authentication isn't supposed to be used for proper login through the browser without setting the right authenticator in xwiki.cfg.

Fixing this is possible, but it wouldn't be very accurate or very easy. Detecting when basic authentication should be used for the current session is not something exposed by the current oldcore.

Show
Sergiu Dumitriu added a comment - Basic authentication isn't supposed to be used for proper login through the browser without setting the right authenticator in xwiki.cfg. Fixing this is possible, but it wouldn't be very accurate or very easy. Detecting when basic authentication should be used for the current session is not something exposed by the current oldcore.

People

  • Assignee:
    Sergiu Dumitriu
    Reporter:
    Guillaume Fenollar
Vote (0)
Watch (1)

Dates

  • Created:
    Updated:
    Resolved:
    Date of First Response: