Drupal version's 7 and 8 (I haven't checked others) contain a line in the default htaccess file that blocks hidden files and folders (beginning with a dot), this results in authentication attempts to the .well-known folder for the webroot authentication method. I was seeing unauthoized (403) failure…

Drupal's defualt .htaccess file breaks webroot authentication

walterebert January 10, 2016, 12:08am 8

The Drupal community is working on a patch for this https://www.drupal.org/node/2408321

3 Likes

Topic		Replies	Views
Webroot unauthorized, possibly because of drupal	3	2735	December 24, 2015
Problem using webroot on redirected non-www website Server	15	4256	April 11, 2016
Is the webroot plugin's sub-directory consistent? Server	3	2855	December 4, 2015
Letsencrypt broken basic authentication on site Help	3	1990	October 25, 2018
Opensuse 13.1, apache 2.4 --- cert create error Server	4	1603	May 19, 2016