Condition typo ~.~

This commit is contained in:
Alexandre Aubin 2024-01-31 00:15:46 +01:00
parent 55d893a80f
commit 5ed18f7b84

View file

@ -256,7 +256,7 @@ end
-- ###########################################################################
if permission ~= nil and ngx.req.get_headers()["Authorization"] ~= nil then
if permission["protect_against_basic_auth_spoofing"] == false then
if permission["protect_against_basic_auth_spoofing"] ~= false then
-- Ignore if not a Basic auth header
-- otherwise, we interpret this as a Auth header spoofing attempt and clear it
local auth_header_from_client = ngx.req.get_headers()["Authorization"]