I’ve been using ipfire for some time, regularly update and am now on the latest (stable) release. I’ve noticed that the WebGUI does no longer require any authentication. This must have happened during an update, but any further update doesn’t seem to reset those configs.
I changed the admin password as well, to no avail. I’ve never changed any configs I’m aware of related to the WebGUI.
My bad, I missed the Request Header: Authorization XXX, I just can’t remember when I filled out the basic auth request. I also was confused because the WebGUI could be accessed in a private tab without any further authentication request, but this seems to be a known issue of BasicAuth and unrelated to ipfire.
Lesson learned: you indeed have to restart your browser every now and then.