Closed Bug 18720 Opened 25 years ago Closed 25 years ago

Set cookie for authentication

Categories

(Bugzilla :: Bugzilla-General, enhancement, P3)

enhancement

Tracking

()

VERIFIED DUPLICATE of bug 20122

People

(Reporter: BenB, Assigned: justdave)

Details

Bugzilla seems to ask everytime my IP address changes for authentication (ID/password). This is very annoying together with dialup lines (and auto-up/down). Bugzilla uses cookies for nearly everything (things I want to be stored on the server like saved queries), why not for authentication? I don't know, if bugzilla relys on the IP address only, but if it does, this is a security bug together with proxies, too.
Status: NEW → RESOLVED
Closed: 25 years ago
Resolution: --- → FIXED
We already have a mechanism in place to handle that -- namely single signon. If you have the feature enabled, then the username/password will be saved the first time you authenticate for a particular site and will be automatically prefilled for you the next time an authentication request occurs for that site. Therefore marking this report as fixed. If I've misunderstood you and this is not what you are referring to, then feel free to reopen it.
Status: RESOLVED → REOPENED
4.7 has no single signon. Mozilla is still not usable for me. What about my worries about the IP address hack? This has nothing to do with the browser.
Resolution: FIXED → ---
Right, I confirm this has nothing to do with the browser. Bugzilla uses cookies and stuff, not the browser-based authentication stuff. Bugzilla *does* use cookies for authentication. But it is also trying to protect against the case where someone eavesdrops on your connection and picks up the cookie. But I agree it hurts people like you, so the bug will remain open...
Good, at least no security issue :-).
Status: REOPENED → ASSIGNED
BTW: My auto-down is currently set to 1 min, so nearly every change needs a log in. I even have to log in twice (once to get the form, a second time to commit) to submit a bug report.
*** This bug has been marked as a duplicate of 20122 ***
Status: ASSIGNED → RESOLVED
Closed: 25 years ago25 years ago
Resolution: --- → DUPLICATE
cleaning up: VERIFY duplicate
Status: RESOLVED → VERIFIED
moving to Bugzilla product reassign to default owner/qa for INVALID/WONTFIX/WORKSFORME/DUPLICATE
Assignee: terry → justdave
Component: Bugzilla → Bugzilla-General
Product: Webtools → Bugzilla
QA Contact: matty
Version: other → unspecified
QA Contact: matty_is_a_geek → default-qa
You need to log in before you can comment on or make changes to this bug.