Hello,
There's an odd behavior when accessing a repository without the trailing slash from a browser, even if the repository is public you're redirected to the login page. With the trailing slash it's working as expected for unauthenticated user.
For example, as an unauthenticated user,
* https://secure.phabricator.com/source/phabricator/ redirects to the repository page
* https://secure.phabricator.com/source/phabricator redirects to the login page
It looks like it's in `AphrontRedirectResponse` called at `DiffusionRepositoryDefaultController`, but I've stopped my investigation there for now. Is it an expected behavior from your point of view ?
I'm using the latest stable version, and it's also the case on your instance.
phabricator 3cd0001d8b95897d5efafa0c391a9e870fd35471 (Sun, Dec 11)
arcanist e17fe43ca3fe6dc6dd0b5ce056f56310ea1d3d51 (Oct 22 2016)
phutil 0ae0cc00acb1413c22bfe3384fd6086ade4cc206 (Sat, Dec 10)
Regards