lokeshj / jzebra

Automatically exported from code.google.com/p/jzebra
0 stars 0 forks source link

Authentication Required box constantly comes up when using basic authentication #104

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
> What steps will reproduce the problem?
1. Put jzebra.jar inside a directory that is password protected using basic 
authentication (setup in a .htaccess file)
2. Load the applet on a page inside the same folder

> What is the expected output? What do you see instead?
A Java Authentication Required box pops up very frequently. Entering the 
password results in the box going away for a while (and the applet loading), 
but the box always pops back up after a few page loads. Checking "Save this 
password to your password list" doesn't seem to do anything.

> What version of the product are you using? On what operating system?
1.4.5, Windows 7

> Please provide any additional information below.
I tried passing the username and password for the directory in the URL, but 
that didn't work.

Have you experienced this before, and would you know of a way to keep the 
authentication box from popping up all the time?

Thanks!

Original issue reported on code.google.com by nathanho...@gmail.com on 16 Nov 2012 at 11:56

GoogleCodeExporter commented 9 years ago
Since jZebra is open source and freely downloadable, why would you password 
protect the directory it resides in?  I cannot understand the benefit of doing 
this.

Password management on a web server can be done many ways.  The approach you 
are using is quite dated.

Back on topic, I suspect you are using IE6, IE7 or IE8.  Firefox generally only 
asks once.  If you had 25 flash objects on your page you would experience this 
same annoying behavior.  This is not a bug with jZebra and I am closing the 
request.

If you have further questions about how to properly set up the jZebra 
directory, please ask on the mailing list where web developers may be able to 
assist you.  This bug tracker is for the Java Applet and is not monitored by 
anyone except myself.

-Tres

Original comment by tres.fin...@gmail.com on 17 Nov 2012 at 2:25

GoogleCodeExporter commented 9 years ago
The directory is password protected because of the other files in it, not 
because of jZebra. I tried moving jZebra outside of the password protected 
directory (and including it from a file inside), but the issue persists. I am 
using Firefox.

I thought it had something to do with the applet itself based on these 
questions on StackOverflow:

http://stackoverflow.com/questions/7395413/applet-displays-login-dialog-if-basic
-authentication-used
http://stackoverflow.com/questions/2366223/bypassing-built-in-browser-authentica
tion-when-making-http-calls-from-embedded-a

I know basic authentication is kind of lame, but I thought an extra layer of 
security for a directory full of important files was kind of comforting :-)

Sorry for the invalid bug report!

Original comment by nathanho...@gmail.com on 17 Nov 2012 at 1:44

GoogleCodeExporter commented 9 years ago
You should be able to host the jar in any directory.  If you have an external 
link to send me via email, I'd be happy to try it out.  
tres.finocchiaro@gmail.com

-Tres

Original comment by tres.fin...@gmail.com on 17 Nov 2012 at 1:57