103403 - HTTP authentication allows view of first page if previously authenticated

Status: VERIFIED DUPLICATE of bug 103402

(Core :: Networking: HTTP, defect)

Description

[Rocco Martin]

Tested on Build 2001091303.

This problem shows up on our network management program which uses basic HTTP
authentication on the root homepage.

When I first visit the page, the authentication dialog comes up as expected.  I
then type in my username and password, then proceed on to view the reports.  So
far, so good.

If I close the browser, launch another instance, and go back to that page I will
be able to see the top level page with no authentication.  I can also visit any
pages that I had previously visited without being confronted with the
authentication dialog.  It is only when I try to view a page I haven't seen
before that I am asked to provide my username/password.  I expect a new instance
of a browser to provide the authentication challenge immediately when I try to
access that page.

If I go to Edit|Preferences|Advanced|Cache and force the disk cache to clear
before attempting to revisit the site, then I will properly get the
authentication challenge.
This behavior is in Netscape 6.1, and Mozilla 0.9.4.  IE 5, 5.5, and 6 work
correctly, as does Netscape 4.7.

If necessary, I can probably set up an example.

This may be related to Bug 96705.

Comment 1

[Chris Lyon]

*** This bug has been marked as a duplicate of 103402 ***

Comment 2

[John Unruh]

Verified dupe.