| Package home | Report new bug | New search | Development Roadmap | Status: Open | Feedback | All | Closed Since Version 0.3.2 |
| Bug #17519 | Don't assume that a realm is an URL | ||
|---|---|---|---|
| Submitted: | 2010-06-24 00:49 UTC | ||
| From: | voxpelli | Assigned: | |
| Status: | Open | Package: | HTTP_OAuth (version SVN) |
| PHP Version: | Irrelevant | OS: | |
| Roadmaps: | (Not assigned) | ||
[2010-06-24 00:49 UTC] voxpelli
(Pelle Wessman)
Description:
------------
In HTTP_OAuth_Consumer_Request::getAuthForHeader() you assume that the realm is a string combining the providers scheme and host.
According to http://tools.ietf.org/html/rfc2617#section-1.2 which is also referenced by http://tools.ietf.org/html/rfc5849#section-3.5.1 the realm is not limited to being an URL.