hbdrawn / poster-extension

Automatically exported from code.google.com/p/poster-extension
0 stars 0 forks source link

Authenticated sessions not shared with Firefox 3.5 #30

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Log into a server requiring authentication in Firefox
2. Post request to servlet on server using Poster
3. Get internal server error returned because Poster is not logged on to
the server

What is the expected output? What do you see instead?
In the previous version (see below) Poster seemed to share authenticated
sessions with Firefox and returned the expected results from the servlet

What version of the product are you using? On what operating system?
Have upgraded to 2.0 on Firefox 3.5 - was working for me on the previous
version I had (sorry don't know which one) with Firefox 2.x

Please provide any additional information below.
I was finding problems with in-between version of Firefox 3.1.10 not
sharing authenticated sessions across tabs, but upgrading to 3.5 has fixed
this, but not the problem with Poster.

Original issue reported on code.google.com by angela.r...@metoffice.gov.uk on 16 Sep 2009 at 11:12

GoogleCodeExporter commented 9 years ago
The internal server error cannot be caused by Poster.  You should handle the 
lack of authentication gracefully 
on your side.

Poster uses the XMLHttpRequest object to send requests which has extended 
features when you use it within 
a plugin.  Unfortunately, you can't force Firefox to send an authentication the 
first time.  It requires a 
authentication challenge somewhere along the way (either via Poster or the web 
browser) to know that the 
"Authorization" header should be sent.

You need to send a "WWW-Authenticate" header as a response for either Basic or 
Digest authentication when 
you receive an request that requires authentication.  That would be the 
appropriate response for the server to 
avoid a 500 status return.

Original comment by alexmilo...@gmail.com on 16 Sep 2009 at 2:12