search

oauthinaction / oauth-in-action-code

Source code for OAuth 2 in Action
https://www.manning.com/books/oauth-2-in-action
Other
714 stars 535 forks source link

auth server not robust against bad basic auth #2

Closed jricher closed 7 years ago

jricher commented 9 years ago

if a client fails to send the text 'Basic' at the beginning of the auth header, the auth server code isn't smart enough to treat that as a bad request and tries to look up the client anyway.