[Zope-PAS] Re: challenge branch ready for review

[Lennart Regebro]

Zachery Bir wrote:
> You said, "which means that _exception()[sic] will then later in the 
> chain perform a HTTP Basic auth no matter what". This is false. I've got 
> a PAS instance with a single CookieAuthHelper enabled to do all 
> challenges. 

Yes, as i noted in my latest response, doing a redirect works if you do 
redirect(url, locked=1). If you don't add the locked=1 bit it doesn't 
work, which of course is what I did...

> Refresh my memory. Which of the three identified can't be implemented?

In-line login forms.