clones/friendica
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Fetch data from basic auth when one of the parameters is missing

This commit is contained in:
Michael 2023-01-22 14:44:57 +00:00
parent 2db935fae2
commit 575fb52438
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/Module/OAuth/Token.php
View File

@ -60,7 +60,7 @@ class Token extends BaseApi
$authorization = $_SERVER['REDIRECT_REMOTE_USER'] ?? ''; $authorization = $_SERVER['REDIRECT_REMOTE_USER'] ?? '';
} }
if (empty($request['client_id']) && substr($authorization, 0, 6) == 'Basic ') { if ((empty($request['client_id']) || empty($request['client_secret'])) && substr($authorization, 0, 6) == 'Basic ') {
// Per RFC2617, usernames can't contain a colon but password can, // Per RFC2617, usernames can't contain a colon but password can,
// so we cut on the first colon to obtain the username and the password // so we cut on the first colon to obtain the username and the password
// @see https://www.rfc-editor.org/rfc/rfc2617#section-2 // @see https://www.rfc-editor.org/rfc/rfc2617#section-2