diff options
| author | Piotr Sarnacki <drogus@gmail.com> | 2012-07-11 01:56:38 +0200 |
|---|---|---|
| committer | Piotr Sarnacki <drogus@gmail.com> | 2012-07-11 01:56:38 +0200 |
| commit | df40d79fdc376eae307830e1607ea7455e51280f (patch) | |
| tree | 5a8ed721d6aee818b20ccb59b265a4754727f5d4 /actionpack/lib/action_controller/metal/rendering.rb | |
| parent | afa68eb1766d8893a1bb79bf989061f3d8f98049 (diff) | |
| download | rails-df40d79fdc376eae307830e1607ea7455e51280f.tar.gz rails-df40d79fdc376eae307830e1607ea7455e51280f.tar.bz2 rails-df40d79fdc376eae307830e1607ea7455e51280f.zip | |
Don't raise an error if http auth token isn't well formatted
When someone sends malformed authorization header, like:
Authorization: Token foobar
given token should be just ignored and resource should not be authorized,
instead of raising error. Before this patch controller would return 401 header
only for well formed tokens, like:
Authorization: Token token=foobar
and would return 500 in former case.
Diffstat (limited to 'actionpack/lib/action_controller/metal/rendering.rb')
0 files changed, 0 insertions, 0 deletions