Merge pull request #36465 from owncloud/fix-kerberos

Request->getHeader('Authentication') returns ''
owncloud · Nov 25, 2019 · b36724f · b36724f
2 parents 9c64155 + e1daab7
commit b36724f
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/apps/dav/lib/Connector/Sabre/Auth.php b/apps/dav/lib/Connector/Sabre/Auth.php
@@ -224,7 +224,7 @@ private function auth(RequestInterface $request, ResponseInterface $response) {
 				//Fix for broken webdav clients
 				($this->userSession->isLoggedIn() && $this->session->get(self::DAV_AUTHENTICATED) === null) ||
 				//Well behaved clients that only send the cookie are allowed
-				($this->userSession->isLoggedIn() && $this->session->get(self::DAV_AUTHENTICATED) === $this->userSession->getUser()->getUID() && $request->getHeader('Authorization') === null)
+				($this->userSession->isLoggedIn() && $this->session->get(self::DAV_AUTHENTICATED) === $this->userSession->getUser()->getUID() && ($request->getHeader('Authorization') === null || $request->getHeader('Authorization') === ''))
 			) {
 				$user = $this->userSession->getUser();
 				$this->checkAccountModule($user);

diff --git a/changelog/unreleased/36465 b/changelog/unreleased/36465
@@ -0,0 +1,5 @@
+Bugfix: the authentication header can also hold an empty string
+
+In some setups a not set authentication header can not only hold null but also an empty string
+
+https://github.com/owncloud/core/pull/36465