Heiko Sommerfeldt wrote:
> Hi,
> 
> I am using THttpServer with digest authentication and it works well.
> What I need is a logout, so the user (browser) needs a new login. 

It's IMO not possible to force the browser to display a login dialog. 
Currently the HTTP server uses a hardcoded nonce-lifetime of one minute.
But even if it would use a one-time nonce (which added some overhead)
the browser may cache and resend user credentials next time he receives 
a 401 response from the server. 
  
--
Arno Garrels [TeamICS]
http://www.overbyte.be/eng/overbyte/teamics.html


-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

Reply via email to