Only run the AnonymousOptionsPlugion on Anonymous requests

Fixes #12744

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

diff --git a/apps/dav/lib/Connector/Sabre/AnonymousOptionsPlugin.php b/apps/dav/lib/Connector/Sabre/AnonymousOptionsPlugin.php
index b69c1e0286cfef548352a4df9b4e0426ed13fe60..390cb4a9c67c2bd626ce64e375cf67eade5bb15d 100644 (file)
--- a/apps/dav/lib/Connector/Sabre/AnonymousOptionsPlugin.php
+++ b/apps/dav/lib/Connector/Sabre/AnonymousOptionsPlugin.php
@@ -50,7 +50,7 @@ class AnonymousOptionsPlugin extends ServerPlugin {
         * @return bool
         */
        public function handleAnonymousOptions(RequestInterface $request, ResponseInterface $response) {
-               if ($request->getMethod() === 'OPTIONS') {
+               if ($request->getHeader('Authorization') === null && $request->getMethod() === 'OPTIONS') {
                        /** @var CorePlugin $corePlugin */
                        $corePlugin = $this->server->getPlugin('core');
                        // setup a fake tree for anonymous access