Item11515: Return HTTP 401 + login page instead of redirect when authentication is required

Return a 401 status in the event of an auth failure (both interactive and REST) with an appropriate WWW-Authenticate header.

See ImprovedRESTSupport and Use401ForCookieAuth - PH for discussion.

-- CrawfordCurrie - 09 Feb 2012

Reckon thsi should go in 1.2.0

-- CrawfordCurrie - 15 Feb 2012

Eons ago I wrote a unit test to check for anchor preservation. As I ended up coding the saving of the anchor in javascript, the unit test was useless, but I kept it as an example of testing the full Foswiki::UI chain.

Need to fix it, and its clone:

• AccessControlTests::test_login_redirect_preserves_anchor
• AdminOnlyAccessControlTests::test_login_redirect_preserves_anchor

Re-opened to fix.

-- OlivierRaginel - 25 Feb 2012

Re-titled so it makes a little more sense in the release notes.

-- PaulHarvey - 26 Feb 2012

Re-opened to sync tests to Release01x01.

-- PaulHarvey - 16 Jun 2012 - 13:46

I think that this is ready to go for 1.2. Just 1.1 unit test issues remain.

-- GeorgeClark - 31 May 2014

Commenting is disabled while not logged in