Description

After installing MoinMoin with Cherokee, I was having trouble getting authentication working together with the auth.HTTPAuth module. The problem turns out to be that Cherokee sends the AUTH_TYPE value in uppercase (BASIC, etc.) while MoinMoin does not to the comparison in a case-insensitive way, and compares the value of AUTH_TYPE to "Basic", etc.

The relevant bit of the RFC (http://tools.ietf.org/html/rfc3875#page-11) says that the comparison for AUTH_TYPE values should be done in a case-insensitive way, so it seems like Cherokee is in the right here. It'd just be a matter of doing env.get('AUTH_TYPE', '').lower() when retrieving AUTH_TYPE, and then comparing to all-lowercase strings.

Component selection

Details

MoinMoin Version

1.8.2

OS and Version

Ubuntu hard 8.04 LTS

Python Version

2.5.2

Server Setup

Server Details

Language you are using the wiki in (set in the browser/UserPreferences)

Workaround

Discussion

Plan


CategoryMoinMoinBugFixed

MoinMoin: MoinMoinBugs/HttpAuthTypeComparisonShouldBeCaseInsensitive (last edited 2009-05-11 21:11:58 by ThomasWaldmann)