Hello,

There's an odd behavior when accessing a repository without the trailing slash from a browser, even if the repository is public you're redirected to the login page. With the trailing slash it's working as expected for unauthenticated user.

For example, as an unauthenticated user,

• https://secure.phabricator.com/source/phabricator/ redirects to the repository page
• https://secure.phabricator.com/source/phabricator redirects to the login page

It looks like it's in AphrontRedirectResponse called at DiffusionRepositoryDefaultController, but I've stopped my investigation there for now. Is it an expected behavior from your point of view ?

I'm using the latest stable version, and it's also the case on your instance.
phabricator 3cd0001d8b95897d5efafa0c391a9e870fd35471 (Sun, Dec 11)
arcanist e17fe43ca3fe6dc6dd0b5ce056f56310ea1d3d51 (Oct 22 2016)
phutil 0ae0cc00acb1413c22bfe3384fd6086ade4cc206 (Sat, Dec 10)

Regards