Login link doesn't open login page anymore

[idefix]

Since the recent movement of Trac, you now aren't taken to a login page when clicking the login link. A browser-popup shows instead, asking you for your server credentials. There are some problems with this:

• my browser's (Opera) password manager won't work anymore
• the popup blocks the rest of the browser window
• when you logout and then click the login link again, you won't be asked for a password, but you're immediately logged in instead

[bonefish]

That's a side-effect of using http-digest authentication instead of sending plain text passwords to the server. The third point is probably a browser feature and it might be possible to configure it.

[mmadia]

To add two additional tidbits: Exiting the browser will clear the authentication cache, requiring the user to re-login. Also, http-digest has stronger security than the previous method which transmitted the user's password as plain-text.