Modify ↓
Opened 7 years ago
Closed 3 weeks ago
#7163 closed defect (cantfix)
Spaces in project environment names kills authentication
| Reported by: | Owned by: | ||
|---|---|---|---|
| Priority: | normal | Milestone: | |
| Component: | general | Version: | 0.11b2 |
| Severity: | major | Keywords: | environment login |
| Cc: | |||
| Release Notes: | |||
| API Changes: | |||
Description
If a trac project environment is created with a space in it's name, authentication via http (and AccountManager? plugin as far as I've seen) seems to disable logging in by returning
Missing or invalid form token. Do you have cookies enabled?
after clicking login.
Authentication method: Basic HTTP authentication with htpasswd file
Attachments (0)
Change History (6)
comment:1 Changed 7 years ago by
comment:2 Changed 7 years ago by
- Keywords environment login added
- Milestone set to 0.11.1
For now, added a caveat in TracEnvironment@31.
comment:3 Changed 8 months ago by
- Milestone changed from next-minor-0.12.x to next-stable-1.0.x
comment:4 Changed 7 weeks ago by
- Owner jonas deleted
comment:5 Changed 4 weeks ago by
Basic authentication and creating new ticket works well with /path/to/trac env using Firefox 38, Chrome 44 beta and IE 8 on 0.12-stable and 1.0-stable.
192.168.11.43 - - [16/Jun/2015 22:16:08] "GET /trac%20env/login HTTP/1.1" 401 - 192.168.11.43 - - [16/Jun/2015 22:16:08] "GET /trac%20env/login HTTP/1.1" 302 - 192.168.11.43 - - [16/Jun/2015 22:16:08] "GET /trac%20env HTTP/1.1" 200 - ... 192.168.11.43 - - [16/Jun/2015 22:16:17] "POST /trac%20env/newticket HTTP/1.1" 303 - 192.168.11.43 - - [16/Jun/2015 22:16:17] "GET /trac%20env/ticket/1 HTTP/1.1" 200 -
comment:6 Changed 3 weeks ago by
- Milestone next-stable-1.0.x deleted
- Resolution set to cantfix
- Status changed from new to closed
The comment:1 said that th:AccountManagerPlugin leads this issue. So, that's a PluginIssue. Closing as cantfix.
Note: See
TracTickets for help on using
tickets.
That specific error only appears when AccountManager? is used. For HTTP authentication, it simply redirects the user to the main page without logging them in.