324976 - Programatically clear HTTP Authentication Cache

Status: RESOLVED DUPLICATE of bug 287957

(Firefox :: General, enhancement)

Description

[Ilanio Castro]

User-Agent:       Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.8) Gecko/20051111 Firefox/1.5

I'm a website developer and I'm using http-authentication on my site.

The first time when a user access my page he/she is asked for username and password through browser authentication box.

After user leaves the site (using a logoff page), if he/she doesn't close the browser window or manually clears the authentication cache, if he/she returns to site again, the authentication box isn't displayed, because the username and password are stored on browser cache. 

Working with Internet Explorer, I use the javascript code document.execCommand("ClearAuthenticationCache") on the logoff page and when the user comes back to site, a new authentication box is displayed, since authentication information was cleared from cache.

I was looking for a way to make the same thing on Firefox because I want to make it compatible with FF, too.

After a long search and various posts on messages boards of Mozillazine, some users told me to create a request in Bugzilla, because there´s no currently way to programatically clears cache of HTTP Authentication in FF, like IE does with the ClearAuthenticationCache command.

I think this missing feature makes user information vulnerable. On public computers, if a user forgets to close browser window or clear the authentication cache manually, other users that use the same computer can acess the site using previous credentials entered, since the browser will not ask for a username and password again.

I think this bug isn't duplicated because I'm asking for a way to perform this task (clear authentication cache) programatically, using javascript or something like it to clear authentication cache without user intervention. 

On the site posted to reproduce problem (http://gemal.dk/browserspy/password-works.html) use Username: test   Password: test.

See the link "flush all credentials" on the page. Use IE to see what I need to do with FF too. 

Reproducible: Always

Steps to Reproduce:
1. Acess http://gemal.dk/browserspy/password-works.html using IE
2. Username: test   Password: test
3. Refresh the page to ensure that you are authenticated
4. Click the link "flush all credentials"
5. Refresh the page and IE will ask for username and password again
6. I need to make the same thing with FF

Actual Results:  
FF doesn't display authentication box on sites that I type my username and password if I manually clear the authentication cache.

Expected Results:  
FF must have a javascript method to clear authentication cache of user programatically.

Comment 1

[Jo Hermans]

ref bug 224195

Comment 2

[Jo Hermans]

*** This bug has been marked as a duplicate of 287957 ***

Comment 3

[Ilanio Castro]

(In reply to comment #2)
> *** This bug has been marked as a duplicate of 287957 ***

But that bug remains unsolved...

Comment 4

[minehunter]

14 years later and still a Problem...
Someone have a solution???