Details
-
Type:
Bug
-
Status:
Resolved
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: 7.0.0pre4, 6.1.12.rc3, 6.1.12
-
Component/s: None
-
Labels:None
-
Patch Submitted:Yes
-
Number of attachments :
Description
Although the HTTP Authentication: Basic and Digest Access Authentication RFC states that the http headers should use "an extensible,
case-insensitive token to identify the authentication scheme" libraries like acegi security require the response header to be case sensitive. ie "Basic" not "basic"
