387652 - multiple auth dialog for same server

Status: RESOLVED DUPLICATE of bug 475053

(Core :: Networking: HTTP, defect)

Description

[Biju]

Attachment: multi_auth.png

If a page which dont needed authentication, having many image tags who's src points to a resource which needed authentication, firefox display multiple authentication dialog.

See multi_auth.png

Why do we needed more that one dialog for a single server.


Attached screen shot display a page at http://192.168.1.254/home.htm
which dont need auth, but the images on the page example needed auth


<img src=http://192.168.1.254/bstripes.jpg>
<img src=http://192.168.1.254/lanip.gif>
<img src=http://192.168.1.254/titl.gif>
<img src=http://192.168.1.254/logo.gif>
<img src=http://192.168.1.254/product.jpg>



Steps:-
------
1. create a html page on local drive
2. add few (4 to 10) <img> tags pointing to images at server which will ask auth info
3. open it in firefox

you see many auth screen as in attachment
PS: please modify product/component if this dont belong here

Comment 1

[(not currently active) Ted Mielczarek]

This sucks, and it's a regression from Firefox 2.

Comment 2

[Kai Engert (:KaiE:)]

Wrong component, no SSL involved here.
This is plain http auth.

Is this fallout from the thread manager backend changes?

Comment 3

[Magnus Melin [:mkmelin]]

Dupe/xref bug 338549

Comment 5

[norman lastovica]

this bug remains in the firefox 3 release candidate.  it is not broken in IE nor firefox 2.  it makes some web sites unusable.  it was reported 10 months ago.  I believe that the priority should be raised.

Comment 10

[Michal Novotny [:michal]]

Patch 329486 from bug #348997 fixes the problem. This bug can be probably marked as duplicate of #348997.

Comment 11

[Biju]

bug 348997 tells about master password so I dont know whether this is the same.
Hence marking depends on.

Comment 12

[Manuel Bernhardt]

FYI: Bug still exist in 3.0.1

Comment 14

[constant_irritation]

I can confirm this bug in Firefox 3.0.5.  It's ridiculous.

Any other browser (and older versions of Firefox, I think) handles this much better:

1. If object requires auth, open one dialog for user/pass
2. If auth incorrect, go back to step 1 for the next object
3. If auth correct, send the entered auth info for future auth requests

Firefox just machine-guns the user with auth requests for every single object that requires it, all at once.

Comment 16

[Max Bowsher]

See bug 430567 for a test URL.

See bug 475053 for a potential patch.

Comment 17

[Nicholas Williams]

This needs to be upgraded to critical. There are sites I can't use Firefox for because of this problem.

Comment 18

[Erik Hensema]

See bug 430567 for another potential patch. The bug also has got a very good discussion on the problem and why it should be fixed.

This bug exists on all architectures and platforms.

Assigning this bug to [e-mail], who already worked on bug 430567. Hope that's ok, Dave?

Comment 19

[Justin Dolske [:Dolske]]

bug 475053 should fix this, so there's no need to assign this to Dave.

Comment 21

[Jason Duell]

Honza,

Please take a look--this bug looks like it's in the same codebase you're working on for bug 475053.  With a little luck your patch will fix this, too.

Can we assign this bug to you?  At a minimum, please tell us whether this bug should be marked as depending on bug 475053

Comment 22

[Honza Bambas (:mayhemer)]

I can definitely tell you this is duplicate of that bug. One of my tests for that bug (already in the patch) is based on scenario from description of this bug.