Download Sometimes Triggers Basic-Auth Dialog

[artntek]

Describe the bug When trying to "download all" for datasets on https://mn-sandbox-ucsb-2.test.dataone.org (KNB theme), I am prompted by a browser dialog (Safari) to enter a username and password - see attached video. I can hit "cancel", or "log in" (leaving the credential blank), and the download will then work as expected.

To Reproduce Steps to reproduce the behavior:

1. Go to https://mn-sandbox-ucsb-2.test.dataone.org
2. do a search and click on a dataset (with or without attachments)
3. Click any of the download buttons

Expected behavior The download should happen without any further prompting.

video showing the issue

Desktop (please complete the following information):

• OS: Mac OS 14.4
• Browser Safari Version 17.4 (19618.1.15.11.12)

Additional Info

• I tried with Firefox and Chrome, it works as expected - no prompts
• Jing tried it with Safari, and did NOT see the prompt, but his Safari was older: Version 17.0 (17616.1.27.111.22, 17616)
• If I copy the <a href= target from the button, and load that in a new tab, I am NOT prompted to log in. This leads me to wonder if metacatui is doing something in the background when I click the button, which in turn confuses Apache and leads to the prompt showing?
• I tried on https://dev.nceas.ucsb.edu using Safari. it works as expected - no prompts

[robyngit]

Note: a few of us were also able to reproduce this on Safari in production instances of MetacatUI. It was difficult to reproduce it consistently. We may want to go in and look at what the download button is doing that might be triggering these auth dialogs.