From a9d79a1a841fb782b955eeeed6fc69a7b4e9136f Mon Sep 17 00:00:00 2001 From: Diep Pham Date: Fri, 31 Jul 2020 00:24:28 +0700 Subject: [PATCH] Fix authenticated-user-header is case sensitive in header authenticator (#4780) From RFC 2616 - "Hypertext Transfer Protocol -- HTTP/1.1", Section 4.2, "Message Headers": Each header field consists of a name followed by a colon (":") and the field value. Field names are case-insensitive. --- core/modules/server/authenticators/header.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/modules/server/authenticators/header.js b/core/modules/server/authenticators/header.js index 6d21cf023..4d3894f1c 100644 --- a/core/modules/server/authenticators/header.js +++ b/core/modules/server/authenticators/header.js @@ -14,7 +14,7 @@ Authenticator for trusted header authentication function HeaderAuthenticator(server) { this.server = server; - this.header = server.get("authenticated-user-header"); + this.header = server.get("authenticated-user-header").toLowerCase(); } /*