Client Authentication in Apache HTTP Server
 

Hi,

i am using basic authentication type in apache http server. It works fine. At the client end, the browser stores username and password in its cache at first time and uses it for further communications (i.e. if we refresh the web page, it won't ask the password again, instead it sends from its cache). And it asks for the password again only when browser is closed and reopened.

But i want that browser to ask for password whenever page gets refresh. can we achieve this without changing client browser settings(i.e from Apache Server End)

Jags

Don't think so
 

Hi,

I looked into the same thing a few months back, basically the answer seems to be no. Off course you could implement the auth using something other than the basic apache http system. Your other problem will be with client web browsers that have a wallet or some other feature, as not only will login detials be saved per client session but also for however long the user keeps the auth information in the wallet.

At the end of the day your problem will always be that the user can ask the web browser to save form fields and will cache http auth per client session.

If you do find a way of doing this I would be very interested.