Re: authentication
| From: | Miguel Cruz | Date: | Tue, 23 Apr 2002 19:17:37 +0000 |
| Subject: | Re: authentication | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-94245@lists.php.net to get a copy of this message | ||
On Tue, 23 Apr 2002, Morten Ronseth wrote:
> Anybody know how to revoke the HTTP authentication, i.e. log people out,
> using PHP?
With most browsers, you can send HTTP status 401 and re-send your realm in
the WWW-Authenticate header. The browser will assume its cached
credentials have become invalid and toss them, asking the user once again
to log in.
It's still a little awkward, and is one more reason why using
session/cookie-based auth is much friendlier.
miguel