[Webkit-unassigned] [Bug 32916] New: XMLHttpRequest with failed authentication should not show login prompt if credentials are provided

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=32916

           Summary: XMLHttpRequest with failed authentication should not
                    show login prompt if credentials are provided
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Mac OS X 10.5
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: jaka at kubje.org


>From http://www.w3.org/TR/XMLHttpRequest/:

--
If authentication fails, and request username and request password are both
null, user agents SHOULD prompt the end user for credentials. If authentication
fails, and request username and request password are provided, user agents MUST
NOT prompt the end user for credentials. [RFC2617]

Note: End users are not prompted if credentials are provided through the open()
API so that authors can implement their own user interface.
--

Currently, Safari always prompts for credentials (both the desktop version and
MobileSafari). On the iPhone when used from UIWebView the situation is even
worse: a login prompt is not shown and the readystatechange event doesn't
occur... the connection just stalls.

Radar bug #7497786
Same bug in Firefox: https://bugzilla.mozilla.org/show_bug.cgi?id=282547

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.