Windows Authentication on Chrome

1,499 views
Skip to first unread message

Maizura Kamaruddin

unread,
Jun 30, 2016, 12:24:39 AM6/30/16
to net...@chromium.org
Hey. I want to create a logout button to sign out the current user from system.

If I use IE, I can use 

try {
  document.execCommand("ClearAuthenticationCache");
  }
  catch (e) { }
  window.close();

this code, but it seems does not work with Chrome.

Do you have any ways?

Ryan Sleevi

unread,
Jun 30, 2016, 12:44:21 AM6/30/16
to Maizura Kamaruddin, net...@chromium.org
No. There is no such way that a webpage can do this using a standards-defined API.

You should consider reviewing https://w3c.github.io/webappsec-credential-management/ , the open issues, and the related mailing list, but so far, every proposal for what you're requesting has been rejected (it conflicts with the web's security model of per-origin capabilities) 

PhistucK

unread,
Jun 30, 2016, 1:36:37 AM6/30/16
to Ryan Sleevi, Maizura Kamaruddin, net...@chromium.org
Why does it conflict? Unless I am misunderstanding, it signs the user out from the same origin on which this code is executed (in terms of HTTP Authorization credentials). Sounds like a natural thing to do.


PhistucK

--
You received this message because you are subscribed to the Google Groups "net-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to net-dev+u...@chromium.org.
To post to this group, send email to net...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/net-dev/CACvaWvaW%2B-6oK5-JcnUgzBoHaeMbyrU1gh7eppvpVcTi8rzNeQ%40mail.gmail.com.

PhistucK

unread,
Jun 30, 2016, 1:38:08 AM6/30/16
to Maizura Kamaruddin, net...@chromium.org


PhistucK

--
You received this message because you are subscribed to the Google Groups "net-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to net-dev+u...@chromium.org.
To post to this group, send email to net...@chromium.org.

PhistucK

unread,
Jun 30, 2016, 1:51:08 AM6/30/16
to Ryan Sleevi, Maizura Kamaruddin, net...@chromium.org
I see, it clear all of the authentication cache. Well, I guess a similar API (or even this one) could just clear the cache of this origin.


PhistucK

Maizura Kamaruddin

unread,
Jun 30, 2016, 2:26:05 AM6/30/16
to PhistucK, Ryan Sleevi, net...@chromium.org
Thank you for the responds guys.. appreciate that. 
Reply all
Reply to author
Forward
0 new messages