481910 - Login forms point to http:// instead of https:// when ssl='authenticated sessions'

Status: RESOLVED FIXED

(Bugzilla :: User Accounts, defect)

Description

[Frédéric Buclin]

Bugzilla 3.2.2 is fine, but this is broken in 3.3.3: the login forms (both new mini forms + the usual one) all three point to http:// instead of https:// when ssl='authenticated sessions'. Not only this breaks the SSL-only session during authentication, but this also prevents Firefox to autocomplete credentials as it detects that you will be redirected to http:// (despite the login page itself is served using https://).

This is a regression due to bug 476090, which removed the check of the 'ssl' parameter.

Comment 1

[Frédéric Buclin]

Attachment: patch, v1

Restore the correct behavior.

Comment 2

[Frédéric Buclin]

Checking in template/en/default/account/auth/login-small.html.tmpl;
/cvsroot/mozilla/webtools/bugzilla/template/en/default/account/auth/login-small.html.tmpl,v  <--  login-small.html.tmpl
new revision: 1.17; previous revision: 1.16
done