Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

BasicAuthenticationFilter case insenstive

Browse Source 
Fixes: gh-5586
This commit is contained in:
Rob Winch
2018-07-31 09:00:34 -05:00
parent 2cd2bab818
commit e3d4d66917
2 changed files with 21 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
web/src/main/java/org/springframework/security/web/authentication/www/BasicAuthenticationFilter.java
View File

@@ -154,7 +154,7 @@ public class BasicAuthenticationFilter extends OncePerRequestFilter {
String header = request.getHeader("Authorization");
if (header == null || !header.startsWith("Basic ")) {
if (header == null || !header.toLowerCase().startsWith("basic ")) {
chain.doFilter(request, response);
return;
}