Skip to content

Basic authentication scheme is not case-insensitive #7163

Closed
@eleftherias

Description

@eleftherias

Actual Behavior

When http basic authentication is enabled and the Authorization header is prefixed with "BASIC" or "BaSiC" and contains a valid token, then the service responds with a 401 Unauthorized status.

Expected Behavior

When http basic authentication is enabled and the Authorization header is prefixed with "BASIC" or "BaSiC" and contains a valid token, then the service responds with a 200 OK status.

Metadata

Metadata

Assignees

Labels

in: webAn issue in web modules (web, webmvc)type: bugA general bug

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions