Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Make basic authentication scheme case-insensitive

Browse Source 
Fixes: gh-7163
This commit is contained in:
Eleftheria Stein
2019-07-29 16:30:03 -04:00
parent 8e6e975e86
commit b55322b2cb
3 changed files with 32 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
web/src/main/java/org/springframework/security/web/authentication/www/BasicAuthenticationConverter.java
View File

@@ -30,6 +30,7 @@ import org.springframework.security.authentication.UsernamePasswordAuthenticatio
import org.springframework.security.web.authentication.AuthenticationConverter;
import org.springframework.security.web.authentication.WebAuthenticationDetailsSource;
import org.springframework.util.Assert;
import org.springframework.util.StringUtils;
/**
* Converts from a HttpServletRequest to
@@ -83,7 +84,7 @@ public class BasicAuthenticationConverter implements AuthenticationConverter {
}
header = header.trim();
if (!header.startsWith(AUTHENTICATION_SCHEME_BASIC) && !header.startsWith(AUTHENTICATION_SCHEME_BASIC.toLowerCase())) {
if (!StringUtils.startsWithIgnoreCase(header, AUTHENTICATION_SCHEME_BASIC)) {
return null;
}