[Zope-dev] acessing raw header information?

[Dirk Datzert]

Hello Holger,

> > Which javscript bug can affected by Authorization ?
> 
> If you e.g. do in javascript:
> 
>     p = new HttpRequest();
>     p.open("POST", url);
>     p.send(somestring, true);
> 
> and the POST-url requires HTTP-Authentication from the Zope-side
> then Mozilla fails to resend a correct POST-request with authorization.
> In fact, mozilla doesn't send the body of the POST-request anymore.
> It doesn't matter if you have already been authenticated (through the
> browser-login-window) before or during that interaction.
> 

Why you do not change the workflow ? first authentication, then show the
form or javascript page, and sent HttpRequest if user is authenticated ?

Or why you can't use method GET ?

Regards,
Dirk