WordPress.org
Get WordPress

Make WordPress Core

Opened 6 years ago

Last modified 3 years ago

#52977 new defect (bug)

Consider using basic auth in https healh check.

Reported by: peterwilsoncc Owned by:
Priority: normal Milestone: Awaiting Review
Component: Site Health Version: 5.7
Severity: normal Keywords: dev-feedback has-patch
Cc: Focuses:

Description

If the WordPress dashboard is behind basic auth, in some checks the site health component will pass the authentication through to background HTTP requests (the wp-cron tests does this for example).

The https detection test does not do this, it would be worth discussing whether it should:

  • always do this
  • send a second request with basic auth if the first request fails
  • something similar not listed here :)

Follow up to #52783.

Change History (3)

#1 @TimothyBlynJacobs
6 years ago

I think it'd be worth always doing this.

This ticket was mentioned in ​PR #5171 on ​WordPress/wordpress-develop by ​@Michi91.
3 years ago #2

  • Keywords has-patch added

See https://core.trac.wordpress.org/ticket/52977

#3 @Michi91
3 years ago

  • Keywords dev-feedback added

Created a patch. It works the same style as the other loopback tests.

I tested it in my local test enviroment and it works like a charme :-)
With enabled basic auth, 'Authorization' header is set and part of the https loopback request

Note: See TracTickets for help on using tickets.