374784 - Basic Authentication: problems when accessing same domain names under same host but different port number.

Status: RESOLVED DUPLICATE of bug 227632

(Toolkit :: Password Manager, defect)

Description

[Feng, C. Sian]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3

When accessing pages protected by Basic Authentication that reside under the same host and same Basic Authetication Domain, but under different ports, Firefox does not save correctly the credentials; it keeps asking them again even after you provide and save the credentials on both areas.

Given the following situation:
A. a restricted access page (using Basic Auth - BA) under the domain "webMethods" at localhost:7575;
B. a restricted access page (using Basic Auth - BA) under the domain "webMethods" at localhost:5555;

Both (A and B) pages are being served under the same host name. Ex.:
site A: http://locahost:7575/... protected by basic authentication domain "webMethods";
site A: http://locahost:5555/... protected by basic authentication domain "webMethods";



Reproducible: Always

Steps to Reproduce:
Given the following situation:
A. a restricted access page (using Basic Auth - BA) under the domain "webMethods" at localhost:7575;
B. a restricted access page (using Basic Auth - BA) under the domain "webMethods" at localhost:5555;


1. create the web sites and configure the basic authentication domain.
2. you access both pages, and save the username and password for both pages (enter into the site A and save the credentials, then enter into the site B, and also save the credentials)
3. After you loaded the web page from site B, try to access the site A.

Actual Results:  
Firefox ask the credentials for site A.

Expected Results:  
Firefox should not ask the credentials for site A again.

Firefox should have identified that it had saved a credential for the site (site A).

Comment 1

[Justin Dolske [:Dolske]]

The requirement to enter a username/password for both ports is deliberate -- Firefox has no way of knowing that both port are under control of the same person, or even that such behavior is desired.

However, it does look like a bug that after you've stored logins for both ports, the authentication prompt should allow you to select which login you want. I caught this as part of my work on bug 374723.

Comment 2

[Feng, C. Sian]

(In reply to comment #1)

Just to clarify:

after saving the credentials for both 'A' and 'B' (at this sequence), Firefox is prompting an empty Basic Auth dialog when accessing port 'A' again. It should at least prompt the previous saved username for this port.

Comment 4

[Justin Dolske [:Dolske]]

I verified that having logins for different ports works fine; the problem here is having multiple logins for the same port. That's what bug 227632 covers.