Closed
Bug 18720
Opened 25 years ago
Closed 25 years ago
Set cookie for authentication
Categories
(Bugzilla :: Bugzilla-General, enhancement, P3)
Bugzilla
Bugzilla-General
Tracking
()
People
(Reporter: BenB, Assigned: justdave)
Details
Bugzilla seems to ask everytime my IP address changes for authentication
(ID/password). This is very annoying together with dialup lines (and
auto-up/down).
Bugzilla uses cookies for nearly everything (things I want to be stored on the
server like saved queries), why not for authentication?
I don't know, if bugzilla relys on the IP address only, but if it does, this is
a security bug together with proxies, too.
Updated•25 years ago
|
Status: NEW → RESOLVED
Closed: 25 years ago
Resolution: --- → FIXED
Comment 1•25 years ago
|
||
We already have a mechanism in place to handle that -- namely single signon. If
you have the feature enabled, then the username/password will be saved the first
time you authenticate for a particular site and will be automatically prefilled
for you the next time an authentication request occurs for that site. Therefore
marking this report as fixed. If I've misunderstood you and this is not what
you are referring to, then feel free to reopen it.
Reporter | ||
Updated•25 years ago
|
Status: RESOLVED → REOPENED
Reporter | ||
Comment 2•25 years ago
|
||
4.7 has no single signon. Mozilla is still not usable for me.
What about my worries about the IP address hack? This has nothing to do with the
browser.
Updated•25 years ago
|
Resolution: FIXED → ---
Comment 3•25 years ago
|
||
Right, I confirm this has nothing to do with the browser. Bugzilla uses cookies
and stuff, not the browser-based authentication stuff.
Bugzilla *does* use cookies for authentication. But it is also trying to
protect against the case where someone eavesdrops on your connection and picks
up the cookie. But I agree it hurts people like you, so the bug will remain
open...
Reporter | ||
Comment 4•25 years ago
|
||
Good, at least no security issue :-).
Updated•25 years ago
|
Status: REOPENED → ASSIGNED
Reporter | ||
Comment 5•25 years ago
|
||
BTW: My auto-down is currently set to 1 min, so nearly every change needs a log
in. I even have to log in twice (once to get the form, a second time to commit)
to submit a bug report.
Comment 6•25 years ago
|
||
*** This bug has been marked as a duplicate of 20122 ***
Status: ASSIGNED → RESOLVED
Closed: 25 years ago → 25 years ago
Resolution: --- → DUPLICATE
Assignee | ||
Comment 8•23 years ago
|
||
moving to Bugzilla product
reassign to default owner/qa for INVALID/WONTFIX/WORKSFORME/DUPLICATE
Assignee: terry → justdave
Component: Bugzilla → Bugzilla-General
Product: Webtools → Bugzilla
QA Contact: matty
Version: other → unspecified
Updated•12 years ago
|
QA Contact: matty_is_a_geek → default-qa
You need to log in
before you can comment on or make changes to this bug.
Description
•