diff --git a/scm-core/src/main/java/sonia/scm/web/filter/BasicAuthenticationFilter.java b/scm-core/src/main/java/sonia/scm/web/filter/BasicAuthenticationFilter.java index a3b6ef5465..342da39d0a 100644 --- a/scm-core/src/main/java/sonia/scm/web/filter/BasicAuthenticationFilter.java +++ b/scm-core/src/main/java/sonia/scm/web/filter/BasicAuthenticationFilter.java @@ -124,13 +124,10 @@ public class BasicAuthenticationFilter extends HttpFilter { user = securityContext.getUser(); } - else if (Util.isNotEmpty(authentication)) + else if (Util.isNotEmpty(authentication) + && authentication.toUpperCase().startsWith( + AUTHORIZATION_BASIC_PREFIX)) { - if (!authentication.toUpperCase().startsWith(AUTHORIZATION_BASIC_PREFIX)) - { - throw new ServletException("wrong basic header"); - } - user = authenticate(request, response, securityContext, authentication); }