search

w3c / webappsec-clear-site-data

WebAppSec Clear Site Data
https://w3c.github.io/webappsec-clear-site-data/
Other
19 stars 21 forks source link

clear basic auth info #65

Open Jxck opened 4 years ago

Jxck commented 4 years ago

IIUC there are no standard way for logout from basic auth. and there are workaround by sending 401 for cover this. but from browser side, I think its kind of clear cached authenticated state.

clear-site-data: "baisic-auth" could cover this ?

annevk commented 4 years ago

There have been proposals around this as well as allowing form-based login (rather than browser prompts), but none of that has gained much traction. It's not that clear whether HTTP authentication is worth investing in.