From 5ed18f7b842fdcfd39557c65938036da3e7e5014 Mon Sep 17 00:00:00 2001 From: Alexandre Aubin Date: Wed, 31 Jan 2024 00:15:46 +0100 Subject: [PATCH] Condition typo ~.~ --- access.lua | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/access.lua b/access.lua index ba034d1..114fe91 100644 --- a/access.lua +++ b/access.lua @@ -256,7 +256,7 @@ end -- ########################################################################### if permission ~= nil and ngx.req.get_headers()["Authorization"] ~= nil then - if permission["protect_against_basic_auth_spoofing"] == false then + if permission["protect_against_basic_auth_spoofing"] ~= false then -- Ignore if not a Basic auth header -- otherwise, we interpret this as a Auth header spoofing attempt and clear it local auth_header_from_client = ngx.req.get_headers()["Authorization"]