note 87420 deleted from features.http-auth by danbrown
| From: | danbrown@php.net | Date: | Thu, 04 Dec 2008 17:13:01 +0000 |
| Subject: | note 87420 deleted from features.http-auth by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-147635@lists.php.net to get a copy of this message | ||
Note Submitter: Anonymous
----
I see a zillion methods of telling the client to forget its credentials - if you are using digest, I
think the correct way to logout would be for the server to no longer recognize a particular
authorization, like forgetting the nonce or something. Easy enough in php, but if you are relying
on apache for authentication, I wonder if there is a way to tell it to forget.