Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
is there any way to tell Apache that it should restart the session and drop an existing http-auth?
I’ve a system where a user is first authenticated with http-auth against apache and afterwards authorized for services within the PHP-Application. Once the user logs out I’d prefer to also reset the existing http-auth somehow.
Any ideas?
Unfortunately, letting users log out was not defined in the various RFCs that cover HTTP auth.
The only way to simulate it is to return a 401 response, which will tell the browser that the credentials sent aren’t valid. Unfortunately, the browser will then prompt the user to log back in again, and that probably isn’t what you want to happen.