-
Enhancement
-
Resolution: Other
-
P3
-
6u10, 7u25, 8, 9, 10, 10.0.1, 10.0.2
-
generic
-
windows
Once authentication is done by browser, implemented using Digest authentication method, if we try access the same contents again using applet within the same browser session( using IE) we have "Authentication Required" pop-up coming again from Java. This is not happening on Firefox. With firefox once authenticated by browser is done there will be no pop-up from Java if same contents are accessed again by an applet within the same browser session.
Same scenario works fine with basic authentication . Digest authentication is smilar to basic with only difference that in case of digest password is transmitted in an ENCRYPTED form (MD5 digest )which is much MORE SECURE than the simple base64 encoding used by Basic Authentication.
Steps to reproduce:
------------------
1) Remove auth.dat from the <deployment_user_home>/security
2) Load following page inisde the IE7 browser(fresh session)
http://hongkong.sfbay.sun.com:8080/digestAuthenticationTest/plugin_tests/protectedDigest/
3) "Authentication Required" pop-up from browser should be there.
Enter
user name : jitu
password : jitu20
4) Try to access the same page again using applet (link given below)
http://hongkong.sfbay.sun.com:8080/plugin_tests/browserAuthentication/DigestAuthentication/DigestAuthenticationTest.html
If "Authentication Required" pop-up from Java is there then bug is reproduced
Same scenario works fine with basic authentication . Digest authentication is smilar to basic with only difference that in case of digest password is transmitted in an ENCRYPTED form (MD5 digest )which is much MORE SECURE than the simple base64 encoding used by Basic Authentication.
Steps to reproduce:
------------------
1) Remove auth.dat from the <deployment_user_home>/security
2) Load following page inisde the IE7 browser(fresh session)
http://hongkong.sfbay.sun.com:8080/digestAuthenticationTest/plugin_tests/protectedDigest/
3) "Authentication Required" pop-up from browser should be there.
Enter
user name : jitu
password : jitu20
4) Try to access the same page again using applet (link given below)
http://hongkong.sfbay.sun.com:8080/plugin_tests/browserAuthentication/DigestAuthentication/DigestAuthenticationTest.html
If "Authentication Required" pop-up from Java is there then bug is reproduced