News for hackers. Stuff that matters.

A comment on Web Authentication Methods Compared. Parent comment

Re:Web Authentication Methods Compared by nmadden on Thursday December 24, 2020 @03:57AM (#25526034)
Right - there is no way for the server to tell a browser to stop sending basic auth credentials.
[ Parent | on HN ]
Re:Web Authentication Methods Compared by JosefAssad on Thursday December 24, 2020 @04:59AM (#25526278)
Well, not explicitly. But you can respond with a set-cookie header for the same session id, with an expiry in the past. Browsers will purge expired cookies.
[ Parent | on HN ]
Re:Web Authentication Methods Compared by nmadden on Thursday December 24, 2020 @07:46AM (#25527002)
For cookies... not for Basic Auth.
[ Parent | on HN ]