How to log out user from web site using BASIC authentication?

http authentication basic-authentication
Marko picture Marko · Oct 24, 2008 · Viewed 210.6k times · Source

Is it possible to log out user from a web site if he is using basic authentication?

Killing session is not enough, since, once user is authenticated, each request contains login info, so user is automatically logged in next time he/she access the site using the same credentials.

The only solution so far is to close browser, but that's not acceptable from the usability standpoint.

Answer

Matthew Welborn picture Matthew Welborn · Oct 8, 2013

Have the user click on a link to https://log:[email protected]/. That will overwrite existing credentials with invalid ones; logging them out.

Related questions

What is the difference between Digest and Basic Authentication?

What is the difference between Digest and Basic Authentication ?

Read More
Preemptive Basic Auth with HttpUrlConnection?

What is the best way to use preemptive basic http authentication using HttpUrlConnection. (Assume for now I can't use HttpClient). EDIT for clarification: I'm setting the un/pw correctly in the request header using Base64 encoding. Are there any additional …

Read More
Basic HTTP authentication in Node.JS?

I'm trying to write a REST-API server with NodeJS like the one used by Joyent, and everything is ok except I can't verify a normal user's authentication. If I jump to a terminal and do curl -u username:password localhost:8000 …

Read More