Issues

ZF-12132: Zend_Auth_Adapter_Http basic authentication bug

Issue Type: Patch Created: 2012-04-02T14:01:29.000+0000 Last Updated: 2012-05-29T13:45:07.000+0000 Status: Closed Fix version(s): Reporter: Alwin Pacheco (alwinkpc) Assignee: Adam Lundrigan (adamlundrigan) Tags: - Zend_Auth

Related issues: - ZF-11025

Attachments:

Description

Zend_Auth_Adapter_Http checks for fix ZF-1515 (line 534) that credentials should be:

$creds = array_filter(explode(':', $auth));

then calls

$password = $this->_basicResolver->resolve($creds[0], $this->_realm);

In Zend_Auth_Adapter_Http_Resolver_File (lines 154 to 162) the file is read splitted by colons. It understans that: $line[0] == $username && $line[1] == $realm && $password = $line[2] but that's not right. The realm is being passed as parameter and the Zend_Auth_Adapter_Http forces that a two parameters file should be used.

Comments

Posted by Adam Lundrigan (adamlundrigan) on 2012-05-29T13:44:59.000+0000

Duplicate of ZF-11025

Have you found an issue?

See the Overview section for more details.

Copyright

© 2006-2016 by Zend, a Rogue Wave Company. Made with by awesome contributors.

This website is built using zend-expressive and it runs on PHP 7.

Contacts