authentication issue

[sunilkalra123]

I've been having issues with authentication for a while and was wondering if anyone else has had the same problem and if they have managed to find a fix.

Running the latest opengrok on tomcat 10. Ive also tried it on the latest docker image.

I followed the tomcat setup guide here that also explains how to set up basic authentication.

the issue is that with these settings i get an unformatted page as all the assets now require authentication. if i move to a different page (search or history) i will be asked to authenticate again - sometimes multiple requests for all the assets that need to be loaded.

if i exclude the assets i get the correctly formatted page but moving to different pages require authentication. Once authenticated, that specific page/servlett works fine for about 30 minutes.

I have tried this with basic and form based auth, localdb and ldap as realms. with and without session fixation. Pretty much stuck.

Authentication seems to work fine with the manager app but i dont know why that doesnt need authenticating for assets.

anyone seen this or have any ideas ?