Basic Authentication stopped working after upgrading FF 58 to 59
We have a couple of sites where people log in to admin-pages using Apache Basic Authentication. This has stopped working since yesterday, when when people started upgrading from Firefox v 58 to the latest v 59. No correct username/password combinations are now accepted.
The following error is shown: "Authorization Required This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required."
Noting has been changed on our servers, an everything still works perfectly on edge and internet explorer and older Firefox v 58.
I have experimented with various clean installs of Firefox and portable Firefox, and the problem definitely comes with FF v 59. There are no settings or ad-ons or anything else interfering.
I can find no info anywhere about what may have changed with FF v 59 that may have caused this.
Whats going on, and how can i fix it?
Id prefer not to have to start advising people to move off Firefox to edge
or ...explorer =P
I'm a developer, so don't worry about getting technical. I just need some clue about where to start looking for a solution.
Is this a known bug in Firefox, that is being worked on, or do I have to do something, and what.
Alle svar (4)
hi, perhaps related to https://bugzilla.mozilla.org/show_bug.cgi?id=1419658?
Addition: I found a workaround. Removed all Swedish letters ÅÄÖ åäö from our passwords, and it worked again.
But it still seems like a bug, to have limit what letters to use in passwords now.
have you seen the bug - it's probably an encoding issue - if you submit the credentials in utf-8 you shouldn't be limited to latin-only characters.
philipp said
hi, perhaps related to https://bugzilla.mozilla.org/show_bug.cgi?id=1419658?
Yes that seems related to what i discovered about it not working with Swedish äåö.
From what i can decipher from the discussion, they just decided to break it and let the users figure out why things stopped working from one day to the next?
Sigh...