Closed Bug 18720 Opened 25 years ago Closed 25 years ago

Set cookie for authentication

Categories

(Bugzilla :: Bugzilla-General, enhancement, P3)

Product:
Bugzilla
Component:
Bugzilla-General
Type:
enhancement

Tracking

()

Status:
VERIFIED DUPLICATE of bug 20122

People

(Reporter: BenB, Assigned: justdave)

Details

Bugzilla seems to ask everytime my IP address changes for authentication
(ID/password). This is very annoying together with dialup lines (and
auto-up/down).

Bugzilla uses cookies for nearly everything (things I want to be stored on the
server like saved queries), why not for authentication?

I don't know, if bugzilla relys on the IP address only, but if it does, this is
a security bug together with proxies, too.
Status: NEW → RESOLVED
Closed: 25 years ago
Resolution: --- → FIXED
We already have a mechanism in place to handle that -- namely single signon.  If
you have the feature enabled, then the username/password will be saved the first
time you authenticate for a particular site and will be automatically prefilled
for you the next time an authentication request occurs for that site.  Therefore
marking this report as fixed.  If I've misunderstood you and this is not what
you are referring to, then feel free to reopen it.
Status: RESOLVED → REOPENED
4.7 has no single signon. Mozilla is still not usable for me.

What about my worries about the IP address hack? This has nothing to do with the
browser.
Resolution: FIXED → ---
Right, I confirm this has nothing to do with the browser.  Bugzilla uses cookies
and stuff, not the browser-based authentication stuff.

Bugzilla *does* use cookies for authentication.  But it is also trying to
protect against the case where someone eavesdrops on your connection and picks
up the cookie.  But I agree it hurts people like you, so the bug will remain
open...
Good, at least no security issue :-).
Status: REOPENED → ASSIGNED
BTW: My auto-down is currently set to 1 min, so nearly every change needs a log
in. I even have to log in twice (once to get the form, a second time to commit)
to submit a bug report.

*** This bug has been marked as a duplicate of 20122 ***
Status: ASSIGNED → RESOLVED
Closed: 25 years ago → 25 years ago
Resolution: --- → DUPLICATE
cleaning up: VERIFY duplicate
Status: RESOLVED → VERIFIED
moving to Bugzilla product
reassign to default owner/qa for INVALID/WONTFIX/WORKSFORME/DUPLICATE
Assignee: terry → justdave
Component: Bugzilla → Bugzilla-General
Product: Webtools → Bugzilla
QA Contact: matty
Version: other → unspecified
QA Contact: matty_is_a_geek → default-qa
You need to log in before you can comment on or make changes to this bug.