# Restful\_authentication and IE

**URL:** <https://www.ruby-forum.com/t/restful-authentication-and-ie/145696>\
**Category:** Rails\
**Created:** [August 13, 2008, 12:56am UTC](https://www.ruby-forum.com/t/restful-authentication-and-ie/145696 "2008-08-13T00:56:27Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![leveille](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/l/a88e57/32.png) [@leveille](https://www.ruby-forum.com/u/leveille)\
**Post date:** [August 13, 2008, 12:56am UTC](https://www.ruby-forum.com/t/restful-authentication-and-ie/145696/1 "2008-08-13T00:56:27Z")

</div>

Hi all,

my Rails app is having a weird, but not uncommon, problem authenticating  
with IE 6 & 7. I’ve removed web auth and cookie auth from our  
authenticated\_system.rb.

I’ve been reading in related posts that IE sends back incorrect headers.  
In my logs I can see my session/create working and my user authenticated  
(this is in SSL mode). Next I redirect (securely as to avoid any IE  
secure/insecure warnings) to our dashboard and can see that also in the  
logs.

However, right below that log entry, I see:

Redirected to [https://www.mysite.com/session/new](https://www.mysite.com/session/new)  
Filter chain halted as  
[#\<ActionController::Filters::ClassMethods::SymbolFilter:0x2aaab0b6e768  
@filter=:login\_required\>] rendered\_or\_redirected.

I have

before\_filter :login\_required

at the top of my dashboard controller and can see the filter chain  
picking that up and redirecting to session/new.

I’ve tried adjust privacy/cookie levels on IE with no luck. This issue  
does not happen for FF, Safari, or Camino.

So I have no idea why it this is happening. Since I’m not using any of  
the web authorization (session only), I cut my access\_denied method down  
to:

fef access\_denied  
store\_location  
redirect\_to new\_session\_path  
end

No magic there. And current\_user method has been cut down to:

def current\_user  
@current\_user ||= login\_from\_session unless @current\_user == false  
end

I’m out of ideas. If anyone has any, it would be _really_ appreciated.  
TIA,

- jason