Authorization scheme for HTTP Basic Authentication should be case insensitive #86
Description
Hi,
According to RFC 2617, the authorization scheme should be case insensitive; thus, Basic and basic should both be valid.
Here's the relevant part:
HTTP provides a simple challenge-response authentication mechanism
that MAY be used by a server to challenge a client request and by a
client to provide authentication information. It uses an extensible,
case-insensitive token to identify the authentication scheme...
Thanks!