diff options
| author | Shivaram Lingamneni <slingamn@cs.stanford.edu> | 2024-07-26 21:51:45 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-07-26 19:51:45 +0000 |
| commit | e1cf760d2f0ba0abe6810fdade69b924f6fdbe1b (patch) | |
| tree | df166d6e654244d4600be057f8c75fca0b8e81fc /routers/utils | |
| parent | 4b376a0ed934ba77d91ab182215fcff07b13c8df (diff) | |
| download | gitea-e1cf760d2f0ba0abe6810fdade69b924f6fdbe1b.tar.gz gitea-e1cf760d2f0ba0abe6810fdade69b924f6fdbe1b.zip | |
OIDC: case-insensitive comparison for auth scheme `Basic` (#31706)
@kylef pointed out on https://github.com/go-gitea/gitea/pull/31632 that
[RFC7617](https://www.rfc-editor.org/rfc/rfc7617.html#section-2)
mandates case-insensitive comparison of the scheme field `Basic`. #31632
copied a case-sensitive comparison from
https://github.com/go-gitea/gitea/pull/6293. This PR fixes both
comparisons.
The issue only affects OIDC, since the implementation for normal Gitea
endpoints is already correct:
https://github.com/go-gitea/gitea/blob/930ca92d7ce80e8b0bdaf92e495026baf2a1d419/services/auth/basic.go#L55-L58
Diffstat (limited to 'routers/utils')
0 files changed, 0 insertions, 0 deletions