Page 1 of 1
Change in password protection?
Posted: 25 Aug 2020, 08:50
by metallissimus
Was there a change to the password protection? I am pretty sure it was possible to only assign a password without a username, which now seems to be no longer working.
Re: Change in password protection?
Posted: 25 Aug 2020, 09:27
by mjau-mjau
I can't imagine that empty username was working earlier, but if it was, this was not by design. You should definitely use a username ... Also, if you clear the username in the panel settings, it would revert to default "admin", which was always the case.
The recent changes to login was mainly that the password is now stored encrypted.
Re: Change in password protection?
Posted: 25 Aug 2020, 10:02
by metallissimus
Oh, maybe I was a bit unclear: I was talking about protecting folders, not panel login.
Re: Change in password protection?
Posted: 26 Aug 2020, 01:22
by mjau-mjau
Right. I did clean up the code recently for this also, but I can't remember that it worked without username. If it did, it was not by design. Http auth (used by the protect mechanism) requires username + password, so it seems pointless to try to exclude username. Also, if you create "users" (from the users tab), it would definitely be required as the username is the key to folder access.
It could be you could login with empty username earlier, but unless this is very important (for some reason), I won't be targeting this as a fix.
Re: Change in password protection?
Posted: 26 Aug 2020, 04:11
by metallissimus
I don't see an important reason to "fix" it, was just confused about the unexpected change in behaviour. Thanks for explaining.