Vapor 4.52.4 released!

[NewsBot]

Vapor 4.52.4 has been released.

This patch was authored by @Frizlab and released by @0xTim.

Currently if the password is empty in a Basic Authorization (the decoded base64 string ends with a semicolon), Vapor will fail to parse it.
It should succeed with an empty password.

This case happens often when dealing with OAuth2: client authentication should be done via Basic auth, and most OAuth clients do not have an app secret, which is represented with an empty password in Basic auth.

Link: Release Fix empty password in basic authorization parsing · vapor/vapor · GitHub

[bot]

Corresponding tweet for this thread:

Devtalk

Share link for this tweet.