465368 - Add ability to iterate and remove specific authenticated sessions

Status: NEW

(Core :: Networking: HTTP, defect, P5)

Description

[Shawn Wilsher :sdwilsh]

Spun out of bug 464949 comment 13.  This bug is about adding two api's to nsIHttpAuthManager to 1) iterate through authenticated sessions and 2) remove specific authenticated sessions.

Comment 1

[Shawn Wilsher :sdwilsh]

As the code is now, I think it's going to be a lot easier to just add an API like removeAllPagesFromHost.  Trying to expose an enumerator will result in me having to change a lot of the nsHttpAuthCache code, and I'm not sure it's really worth it.

Comment 2

[Boris Zbarsky [:bzbarsky]]

That sounds fine as long as we document what kind of hostname we're talking here (asciiHost or not).

Comment 3

[Shawn Wilsher :sdwilsh]

(In reply to comment #2)
> That sounds fine as long as we document what kind of hostname we're talking
> here (asciiHost or not).
So, it looks to me that nsHttpAuthCache & friends assume it is always ASCII host (given that everything is stored in char *, which I supposed could be UTF-8 encoded).  I think the API would be most useful if it wasn't just ascii hosts (in the private browsing case, we access the hostname property).

Comment 4

[Boris Zbarsky [:bzbarsky]]

The API could take both if it does its own ACE stuff before comparing...  The DNS service does something like that.

Comment 5

[Michael Kohler [:mkohler]]

This is a mass change. Every comment has "assigned-to-new" in it.

I didn't look through the bugs, so I'm sorry if I change a bug which shouldn't be changed. But I guess these bugs are just bugs that were once assigned and people forgot to change the Status back when unassigning.

Comment 6

[Firefox Bug Husbandry Bot]

Bulk change to priority: https://bugzilla.mozilla.org/show_bug.cgi?id=1399258