From 19d4a41ecae82410dfccae8e23698281c7528888 Mon Sep 17 00:00:00 2001 From: Fredrik Tolf Date: Wed, 13 Apr 2011 13:52:31 +0200 Subject: [PATCH] doc: Include the header use of htextauth. --- doc/htextauth.doc | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/doc/htextauth.doc b/doc/htextauth.doc index d124652..b985492 100644 --- a/doc/htextauth.doc +++ b/doc/htextauth.doc @@ -28,6 +28,11 @@ so that the authentication program does not have to be called for each and every request. Cached credentials are cleared from the cache when they have not been used for over 30 minutes. +When authentication succeeds, *htextauth* removes the HTTP +`Authorization` header from the request before passing the request on +to the child handler, and adds the `X-Ash-Remote-User` header in its +place, containing the name of the authenticated user. + If the child handler exits, *htextauth* exits as well. OPTIONS -- 2.11.0