From: Eric Covener <covener@apache.org>
Date: Sun, 1 Dec 2024 14:17:01 +0000 (+0000)
Subject: Merge r1922246 from trunk:
X-Git-Tag: 2.4.63-candidate~75
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6f5a4244f68f743770f3bd9c76ffd4632ddbb3be;p=thirdparty%2Fapache%2Fhttpd.git

Merge r1922246 from trunk:

Don't use AuthFormLoginRequiredLocation in inline

Intro to inline says:

If a non-authenticated user attempts to access a page protected by
mod_auth_form that isn't configured with a AuthFormLoginRequiredLocation
directive, a HTTP_UNAUTHORIZED status code is returned to the browser
indicating to the user that they are not authorized to view the page.

The entire point seems to be to keep the URL the same by using an internal redirect
via ErrorDocument, and AuthFormLoginRequiredLocation conflicts with it.

Submitted By: Rishikeshan Lavakumar/Sulochana <oss AT @rishikeshan.com>




git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1922247 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/docs/manual/mod/mod_auth_form.xml b/docs/manual/mod/mod_auth_form.xml
index 7b6479d1b3e..69cd8b028d3 100644
--- a/docs/manual/mod/mod_auth_form.xml
+++ b/docs/manual/mod/mod_auth_form.xml
@@ -212,7 +212,6 @@ ErrorDocument 401 "/login.shtml"
 AuthUserFile "conf/passwd"
 AuthType form
 AuthName realm
-AuthFormLoginRequiredLocation "http://example.com/login.html"
 Session On
 SessionCookieName session path=/
         </highlight>