https://bz.apache.org/bugzilla/show_bug.cgi?id=62048

Christopher Schultz <ch...@christopherschultz.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |Beginner

--- Comment #2 from Christopher Schultz <ch...@christopherschultz.net> ---
You CAN "logout" using BASIC auth. It's just ugly.

To logout, you just have to issue the following response:

[status code] 401 Unauthorized
WWW-Authenticate: Basic realm="[realm name]"
[blank line between headers]
HTML document explaining that you've been logged-out.


The browser will immediately re-request the user's credentials (and flush the
old credentials from the cache). Clicking "cancel" on the browser's dialog box
will cause the 401 response and document to be rendered to the browser.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to