diff options
| author | Sean Griffin <sean@seantheprogrammer.com> | 2015-08-11 17:25:00 -0600 |
|---|---|---|
| committer | Sean Griffin <sean@seantheprogrammer.com> | 2015-08-11 17:25:00 -0600 |
| commit | e69364bc2da0cd5cabe3f01a8dce27ac841a3a2b (patch) | |
| tree | 49e83cb67b91484dfe2e8c82515662ae8d29e614 /actionpack/lib | |
| parent | 97d7dc48d68e4c20c17e315c8f4d3f045ed97f5a (diff) | |
| parent | dec2f52fa494c5adf8805ec227ed60d911a6fb4a (diff) | |
| download | rails-e69364bc2da0cd5cabe3f01a8dce27ac841a3a2b.tar.gz rails-e69364bc2da0cd5cabe3f01a8dce27ac841a3a2b.tar.bz2 rails-e69364bc2da0cd5cabe3f01a8dce27ac841a3a2b.zip | |
Merge pull request #21203 from denniss/issue-21199
Authorization scheme should be case insensitive. Fixes #21199
Diffstat (limited to 'actionpack/lib')
| -rw-r--r-- | actionpack/lib/action_controller/metal/http_authentication.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/actionpack/lib/action_controller/metal/http_authentication.rb b/actionpack/lib/action_controller/metal/http_authentication.rb index 032275ac64..bbb38cf8fc 100644 --- a/actionpack/lib/action_controller/metal/http_authentication.rb +++ b/actionpack/lib/action_controller/metal/http_authentication.rb @@ -94,7 +94,7 @@ module ActionController end def has_basic_credentials?(request) - request.authorization.present? && (auth_scheme(request) == 'Basic') + request.authorization.present? && (auth_scheme(request).downcase == 'basic') end def user_name_and_password(request) |