ASC.ApiSystem: fixed auth header parsing

This commit is contained in:
Andrey Savihin 2020-02-25 15:06:16 +03:00
parent d44e359f24
commit 67e7f536d1

View File

@ -95,9 +95,11 @@ namespace ASC.ApiSystem.Classes
return Task.FromResult(AuthenticateResult.Fail(new AuthenticationException(HttpStatusCode.Unauthorized.ToString()))); return Task.FromResult(AuthenticateResult.Fail(new AuthenticationException(HttpStatusCode.Unauthorized.ToString())));
} }
if (!header.StartsWith("ASC", StringComparison.InvariantCultureIgnoreCase)) var substring = "ASC";
if (!header.StartsWith(substring, StringComparison.InvariantCultureIgnoreCase))
{ {
var splitted = header.Replace("ASC", string.Empty).Trim().Split(':', StringSplitOptions.RemoveEmptyEntries); var splitted = header.Substring(substring.Length).Trim().Split(':', StringSplitOptions.RemoveEmptyEntries);
if (splitted.Length < 3) if (splitted.Length < 3)
{ {