digest auth: uri in authorization must match request uri
@@ -125,6 +125,13 @@ public class DigestAuthHandlerImpl extends AuthorizationAuthHandler implements D
}
n.count = nc;
}
+
+ final String uri = authInfo.getString("uri");
+
+ if (!uri.equalsIgnoreCase(context.request().uri())) {
+ handler.handle(Future.failedFuture(UNAUTHORIZED));
+ return;
+ }
} catch (RuntimeException e) {
handler.handle(Future.failedFuture(e));
}
