51854 - Basic authentication broken

Status: VERIFIED FIXED

(Core :: Networking, defect, P3)

Description

[Brandon Hume]

When trying to access a URL protected with basic authentication, Mozilla
build ID 2000090721

Here's a truss capture of what Mozilla sends:

write(19, 0x00855030, 270)                      = 270
   G E T   / s t u f f /   H T T P / 1 . 1\r\n A u t h o r i z a t
   i o n :   B a s i c   O g = =\r\n H o s t :   l o c a l h o s t
  \r\n U s e r - A g e n t :   M o z i l l a / 5 . 0   ( X 1 1 ;
   U ;   S u n O S   5 . 8   s u n 4 m ;   e n - U S ;   m 1 8 )
   G e c k o / 2 0 0 0 0 9 0 7\r\n A c c e p t :   * / *\r\n A c c
   e p t - L a n g u a g e :   e n\r\n A c c e p t - E n c o d i n
   g :   g z i p , d e f l a t e , c o m p r e s s , i d e n t i t
   y\r\n K e e p - A l i v e :   3 0 0\r\n C o n n e c t i o n :
   k e e p - a l i v e\r\n\r\n

Note the "Authorization: Basic Og==" header sent.  That same "Og==" appears in
all cases.  (I was trying to log in as snog/snuh, which isn't valid, but the
result is the same even when the login is valid.)

Comment 1

[H. Wade Minter]

Confirmed on Linux, 2000090721.  Basic authentication fails under Mozilla, works
under Netscape 4.75.

Comment 2

[John Unruh]

Changing to new. Confirmed on Win98 and Linux.

Comment 3

[Margaret Chan]

Should it be changed to All instead of Sun/Solaris?

Comment 4

[Brandon Hume]

Perhaps, but I'm using my Win32 nightly from home right now, and I can log in
via Basic Auth just fine (build ID 2000090708...)

What was the build ID/pull time of the Win32 build that failed?

Comment 5

[Brandon Hume]

However, with a FreeBSD-CURRENT mozilla built from a pull at 2000/09/09 8 am ADT,
I do get failed authentication.

Comment 6

[Brandon Hume]

I haven't seen any commentary go by, but with today's Solaris nightly
(2000091021) Basic Auth is working fine again.

Magic disappearing bugs are scary, but I suppose if someone can verify this
as working on another architecture, this can be closed out.

Comment 7

[Gagan]

yes I fixed this last night. 

Comment 8

[Tom Everingham]

verified