You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
which, according to RFC 5234 — ABNF, means there can be one or more spaces between the auth-scheme and token68.
3.6. Variable Repetition: *Rule
The operator "*" preceding an element indicates repetition. The full
form is:
<a>*<b>element
where <a> and <b> are optional decimal values, indicating at least
<a> and at most <b> occurrences of the element.
Default values are 0 and infinity so that *<element> allows any
number, including zero; 1*<element> requires at least one;
3*3<element> allows exactly 3; and 1*2<element> allows one or two.
RFC 9110 defines the field value of the
Authorization
header as:which, according to RFC 5234 — ABNF, means there can be one or more spaces between the
auth-scheme
andtoken68
.http-auth/src/auth/basic.js
Lines 64 to 70 in 05bb4d7
Your parser assumes the
, and fails to parse the valid
1*SP
part to be a single space,credentials
,erroneously returning
""
.The text was updated successfully, but these errors were encountered: