tolerate empty Authorization header (#22)

motis-project · Jan 19, 2025 · f5a6978 · f5a6978
1 parent 30f8b05
commit f5a6978
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/web_server/query_router.cc b/src/web_server/query_router.cc
@@ -164,7 +164,7 @@ void query_router<Executor>::decode_content(request& req) {
 template <typename Executor>
 void query_router<Executor>::set_credentials(route_request& req) {
   if (auto const it = req.base().find(boost::beast::http::field::authorization);
-      it != req.base().end()) {
+      it != req.base().end() && it->value().length() > 6) {
     auto const auth = it->value().substr(6);
     auto const credentials =
         decode_base64(std::string{auth.data(), auth.size()});