Hi to all, I''ve created a new project with Rails 2.3.2 and literally copied the HTTP Digest Authententication example from the documentation into a SecretsController: class SecretsController < ApplicationController Users = {"dhh" => "secret"} before_filter :authenticate def secret render :text => "Password Required!" end private def authenticate realm = "Application" authenticate_or_request_with_http_digest(realm) do |name| Users[name] end end end Now, I do get the HTTP authentication dialog in my browser(s), but entering any name will let me pass!! Only on Escape I get the unauthorized page. But wrong names or passwords will let me through! In my log file I get: Processing SecretsController#index (for 127.0.0.1 at 2009-04-09 10:44:32) [GET] Filter chain halted as [:authenticate] rendered_or_redirected. Completed in 16ms (View: 16, DB: 0) | 401 Unauthorized [http:// localhost/secrets] [4;36;1mSQL (0.0ms) [0m [0;1mSET NAMES ''utf8'' [0m [4;35;1mSQL (0.0ms) [0m [0mSET SQL_AUTO_IS_NULL=0 [0m Processing SecretsController#index (for 127.0.0.1 at 2009-04-09 10:44:35) [GET] Rendering template within layouts/secrets Rendering secrets/index Completed in 811ms (View: 811, DB: 0) | 200 OK [http://localhost/ secrets] host/secrets] [4;36;1mSQL (0.0ms) [0m [0;1mSET NAMES ''utf8'' [0m [4;35;1mSQL (0.0ms) [0m [0mSET SQL_AUTO_IS_NULL=0 [0m What is missing? Something in my routes? I''ve tried this with IE/Safari/Firefox on Vista and XP. I''m running on localhost with a XAMPP installation. Should I configure something? Thanks Jan --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org To unsubscribe from this group, send email to rubyonrails-talk+unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en -~----------~----~----~----~------~----~------~--~---