Make it possible to use WSGI without repoze.who.

doc/CHANGES.rst

@@ -11,6 +11,8 @@ http://docs.zope.org/zope2/releases/.
 Bugs Fixed
 ++++++++++
 
+- Make it possible to use WSGI without repoze.who.
+
 - Fixed serious authentication vulnerability in stock configuration.
 
 - Fixed a regression in webdav support that broke external editor feature.

src/ZPublisher/WSGIPublisher.py

@@ -108,6 +108,9 @@ class WSGIResponse(HTTPResponse):
 
     def _unauthorized(self):
         self.setStatus(401)
+        realm = self.realm
+        if realm:
+            self.setHeader('WWW-Authenticate', 'basic realm="%s"' % realm, 1)
 
     def write(self,data):
         """ Add data to our output stream.