Wrong format of RSS feed before authentification

[Alexander Shopov]

We have an internal uptodate installation of trac 0.8.4 on Apache with mod_python. We have configured it to use authetification - the anonymous user cannot reach any resources - it is not listed in

list permissions

at all. When a person that has not authenticated tries ot use a RSS to read some part of trac, what trac generates back is the initial login page which is not in RSS feed format.

I would suggest generating a page similar in content to the login page that says more or less You are not authenticated, go here <link> in RSS format (maybe changing the RSS feed title to "Origirnal title + Not authenticated" or sth. similar). This way feeds will not be presumed to be broken by a RSS feed reader.

Best regards:

al_shopov

[Christopher Lenz]

Hmm, if anonymous isn't allowed to read any part of your Trac install, then you should have protected the entire site, which would trigger HTTP authentication. This doesn't involve a "login page" – in fact there is no such page in Trac.

Anyway, I think this can be considered a duplicate of #540.

[ash@…]

Yep, This is a duplicate of #540. When I said "login page" I meant the page that gives you chance to login or create a new session. (The page below the line)

---

Error accessing authenticated session

Session cookie requires authentication.

Please choose action:

• Log in and continue session
• Create new session (no login required)

TracGuide — The Trac User and Administration Guide