leslie-tsang commented on a change in pull request #5419:
URL: https://github.com/apache/apisix/pull/5419#discussion_r742604963
##########
File path: apisix/plugins/basic-auth.lua
##########
@@ -80,12 +80,23 @@ local function extract_auth_header(authorization)
return nil, err
end
+ if not m then
+ return nil, "Invalid authorization header format"
+ end
+
local decoded = ngx.decode_base64(m[1])
+ if not decoded then
+ return nil, "Failed to decode authentication header: " .. m[1]
+ end
+
Review comment:
@spacewander
Is there a test case can hit this scenario ?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
