I have a WordPress website which is in development, and is hidden behind a BasicAuth password prompt. My root level .htaccess file:

AuthType Basic
AuthName "Login Details"
AuthUserFile /var/www/vhosts/site.tld/.htpasswd
Require valid-user

When accessing the front-end of the site, it seems to prompt once and then all is fine. When using the admin, we are seeing the prompt multiple times, despite ticking "remember password". It seems to mostly occur when using Safari - a prompt for almost all network requests on a page load.

The site is fully HTTPS, and I have cleared the Safari cache and closed/reopened the browser. An example request in the Apache access (SSL) log:

"GET /wp-content/themes/blender/screenshot.png HTTP/1.0" 401 1802 "https://www.example.com/wp-admin/themes.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.2 Safari/605.1.15"


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.