Mantis Bugtracker
  

Viewing Issue Advanced Details Jump to Notes ] View Simple ] Issue History ] Print ]
ID Category Severity Reproducibility Date Submitted Last Update
0004065 [Quercus] minor always 06-02-10 10:07 12-13-11 14:05
Reporter sblommers View Status public  
Assigned To domdorn
Priority normal Resolution fixed Platform Linux
Status closed   OS Ubuntu
Projection none   OS Version 10.04
ETA none Fixed in Version Product Version 4.0.8
  Product Build
Summary 0004065: WWW-Authenticate
Description Example 0000006 Basic HTTP Authentication example
[CODE]<?php
if (!isset($_SERVER['PHP_AUTH_USER'])) {
    header('WWW-Authenticate: Basic realm="My Realm"');
    header('HTTP/1.0 401 Unauthorized');
    echo 'Text to send if user hits Cancel button';
    exit;
} else {
    echo "
Hello {$_SERVER['PHP_AUTH_USER']}.

";
    echo "
You entered {$_SERVER['PHP_AUTH_PW']} as your password.

";
}
?>
[/CODE]
From: http://php.net/manual/en/features.http-auth.php [^] [^]

Put this code in auth.php and update to Google AppEngine.

Visit http://example.appspot.com/auth.php [^] [^]

You will be prompted for a username and password.

You will never reach the message, it will repeatedly prompt for a username and password.

This suggests that $_SERVER['PHP_AUTH_USER'] and $_SERVER['PHP_AUTH_PW'] are never populated.

I think this is a bug.
Steps To Reproduce <?php
if (!isset($_SERVER['PHP_AUTH_USER'])) {
    header('WWW-Authenticate: Basic realm="My Realm"');
    header('HTTP/1.0 401 Unauthorized');
    echo 'Text to send if user hits Cancel button';
    exit;
} else {
    echo "
Hello {$_SERVER['PHP_AUTH_USER']}.

";
    echo "
You entered {$_SERVER['PHP_AUTH_PW']} as your password.

";
}
?>
Additional Information This is the same as bug 4000 http://bugs.caucho.com/view.php?id=4000 [^] that should be fixed for 4.0.7 and SVN but I can't seem te get this to work and I cannot find any trace to php/082h
php/082i
Attached Files

- Relationships
has duplicate 0004403closed  PHP_AUTH_USER 

- Notes
(0005079)
tokeefe
02-24-11 11:55

I can confirm that this is still an issue in 4.0.11

The original bug was: 0004000

The forum-related content is: http://forum.caucho.com/showthread.php?t=7961&highlight=PHP_AUTH_USER [^]

I also filed a bug before seeing this issue: 0004403 (sorry)
 
(0005082)
kdecherf
02-25-11 04:16

0004403 is fixed:
https://github.com/CleverCloud/Quercus/commit/6bf4217778e374136fc8f7c3a5de93de519b0044 [^]
 
(0005308)
domdorn
06-09-11 13:29

its not quite the same issue.
issue 4000 was using digest authentication.
will look into this.
 
(0005309)
domdorn
06-09-11 14:50

Resin and Jetty seemed to handle digest authentication a little different.
However, its working now on Jetty > 7.0.2.v20100331
 

- Issue History
Date Modified Username Field Change
06-02-10 10:07 sblommers New Issue
02-24-11 11:55 tokeefe Note Added: 0005079
02-25-11 04:16 kdecherf Note Added: 0005082
06-09-11 13:26 domdorn Relationship added has duplicate 0004403
06-09-11 13:29 domdorn Note Added: 0005308
06-09-11 13:29 domdorn Assigned To  => domdorn
06-09-11 13:29 domdorn Status new => acknowledged
06-09-11 14:50 domdorn Status acknowledged => resolved
06-09-11 14:50 domdorn Resolution open => fixed
06-09-11 14:50 domdorn Note Added: 0005309
12-13-11 14:05 domdorn Status resolved => closed


Mantis 1.0.0rc3[^]
Copyright © 2000 - 2005 Mantis Group
42 total queries executed.
34 unique queries executed.
Powered by Mantis Bugtracker