didReceiveAuthenticationChallenge getting called only once iPhone

Question

I am connecting to server using NSURLConnection. The server asks for basic authentication for which I am using the delegate methods :-didReceiveAuthenticationChallenge. But this gets called only once. If I change password to some different value, then this delegate methods does not get called and it takes my login as successful?

Any kind of help will be appreciated.

Thanks.

score 6 · Answer 1 · answered Jul 12 '11 at 09:59

Solved!

It turns out that NSURLConnection was actually behaving correctly - that is, didReceiveAuthenticationChallenge: was being called for every authentication challenge.

The problem was that the server was not sending challenges after the first one. This turned out to be because the server was setting a cookie.

You can force a new challenge by simply deleting the cookie. Because there are no other useful cookies for this server, I just delete all of them:

- (void)clearCookiesForURL {
    NSHTTPCookieStorage *cookieStorage = [NSHTTPCookieStorage sharedHTTPCookieStorage];
    NSArray *cookies = [cookieStorage cookiesForURL:_URL];
    for (NSHTTPCookie *cookie in cookies) {
        NSLog(@"Deleting cookie for domain: %@", [cookie domain]);
        [cookieStorage deleteCookie:cookie];
    }
}

score 1 · Answer 2 · edited Oct 09 '12 at 14:33

1

You have to do following steps to close session completely.

Remove all cookies
Remove all credentials
NSURLCredentialPersistence should be NSURLCredentialPersistenceNone

edited Oct 09 '12 at 14:33

Erwin

4,757
3
31
41

answered Oct 09 '12 at 14:29

tmatsugaki

11
1

score 1 · Answer 3 · answered Aug 11 '13 at 14:37

1

Unfortunately, there is currently no easy way of doing what you asked for:

Apple informative explanation: TLS Session Cache

Open Radar bug request: No way to clear TLS Cache with NSURLConnection

answered Aug 11 '13 at 14:37

HyBRiD

688
4
23

score 0 · Answer 4 · edited May 23 '17 at 10:28

0

NSURLConnection will cache credentials. Here is an approach to find and erase specific credentials (so you are challenged again):

Is it possible to prevent an NSURLRequest from caching data or remove cached data following a request?

Hope that works for you, Steve

edited May 23 '17 at 10:28

Community

1
1

answered Jun 16 '11 at 13:43

Steve N

2,667
3
30
37

[[NSURLCredentialStorage sharedCredentialStorage] allCredentials] is empty for me, so there's nothing to remove. – Ben Challenor Jun 27 '11 at 12:11
If I use NSURLCredentialPersistenceForSession instead of NSURLCredentialPersistenceNone they are added to the allCredentials dictionary, but manually removing them doesn't seem to help. – Ben Challenor Jun 27 '11 at 12:47

didReceiveAuthenticationChallenge getting called only once iPhone

4 Answers4

Linked