search

globaleaks / APAF

Anonymous Python Application Framework
33 stars 15 forks source link

If login with password fail I get a confusing login prompt #51

Open hellais opened 11 years ago

hellais commented 11 years ago

If login with password fails I get sent the WWW-Authenticate headers and I get prompted to login with username and password.

I believe this has to do with the use of the web.authenticated cyclone decorator that does this automatically.

We should disable the ability to login via WWW-Authenticate HTTP headers, but only do so via FORMs.