fallintoplace opened a new pull request, #942: URL: https://github.com/apache/arrow-go/pull/942
### Rationale for this change A valid Base64 Basic credential without a colon decoded to a one-element slice. The streaming authentication interceptor then indexed the missing password and panicked. ### What changes are included in this PR? Use `strings.Cut` to split the decoded username and password, and return an Unauthenticated error when the separator is absent. Empty usernames and passwords remain validator policy. ### Are these changes tested? Yes. Regression cases cover empty input, a username without a separator, empty username/password values, and passwords containing additional colons. `go test ./arrow/flight` passes. ### Are there any user-facing changes? Malformed Basic credentials now return Unauthenticated instead of panicking. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
