openerp-community-reviewer team mailing list archive

["Holger Brunn \(Therp\)" <hbrunn@xxxxxxxx>]

Which pep8 checker complains?

About the redirect: When you do a http basic authentication, at least chrome and firefox keep those credentials until the session ends and there's no way to purge them via javascript. This means that in a setup where you authenticate via auth headers, you'll never be able to log out (you would have to close you browser, and not just the specific window, but the whole browser process).

So this redirect instructs the browser to use 'logout' and no password as credentials, replacing the credentials you used to login which make you being properly logged out.

Then the web client would throw an error and the webclient would be unusable until the users hits F5, which is why the auth_from_http_basic_logout module exists to catch this error, lock the webclient so that you have a nice ui to login again.
-- 
https://code.launchpad.net/~therp-nl/server-env-tools/7.0-auth_from_http_basic/+merge/202316
Your team Server Environment And Tools Core Editors is subscribed to branch lp:server-env-tools.