If a user sends an authorization header as: Bearer[ extra spaces]

Question

If a user sends an authorization header as: Bearer[ extra spaces]

token

and my naive split by space code cannot find the token part due to extra spaces, should I return 400 or 500 or 401?

0

24.03.2021

10 ответов

9 просмотров

🍋 Автор вопроса

Thomas
Why not just fix your naive split by space code?

it's simpler to split

0

24.03.2021

ＭＵＴＨＵ・ＫＵＭＡＲ「メーカー」 🔺

Thomas
Why not just fix your naive split by space code?

The standard only allows one space

0

24.03.2021

Thomas

ＭＵＴＨＵ・ＫＵＭＡＲ「メーカー」 🔺
The standard only allows one space

link me up

0

24.03.2021

ＭＵＴＨＵ・ＫＵＭＡＲ「メーカー」 🔺

400 Bad Request, or 422 Unprocessable Entity

0

24.03.2021

ＭＵＴＨＵ・ＫＵＭＡＲ「メーカー」 🔺

ＭＵＴＨＵ・ＫＵＭＡＲ「メーカー」 🔺
400 Bad Request, or 422 Unprocessable Entity

Actually, you wouldn't know if it's an unprocessable entity, you'd only know it's an invalid token

0

24.03.2021

🍋 Автор вопроса

ＭＵＴＨＵ・ＫＵＭＡＲ「メーカー」 🔺
The standard only allows one space

now that's even better. I will capitalize the error message since I have an opportunity to blame the user(once in a lifetime)

0

24.03.2021

ＭＵＴＨＵ・ＫＵＭＡＲ「メーカー」 🔺

🍋
now that's even better. I will capitalize the erro...

I think it's very uncommon to make this mistake lel

0

24.03.2021

🍋 Автор вопроса

ＭＵＴＨＵ・ＫＵＭＡＲ「メーカー」 🔺
I think it's very uncommon to make this mistake le...

one can never trust any user input. Some humans are aweful

0

24.03.2021

ＭＵＴＨＵ・ＫＵＭＡＲ「メーカー」 🔺

Thomas
link me up

https://tools.ietf.org/html/rfc6750#section-2.1 https://tools.ietf.org/html/rfc2617#section-2

0

24.03.2021

Thomas · Accepted Answer

Thomas

Why not just fix your naive split by space code?

0

24.03.2021

Похожие чаты

If a user sends an authorization header as: Bearer[ extra spaces]

10 ответов

Похожие вопросы