sinatra/sinatra — Issue #462: rack-protection 1.2.0 with Basic Authentication not working on jetty
Author: leifg
Created: 2012-02-03 17:32:10+00:00
State: open

Hello everyone,

we are running a sinatra app on JRuby 1.6.5 and Jetty 7.3.0.

the last week we upgraded from sintatra 1.3.1 to 1.3.2. The new release depends on rack-protection 1.2.0.

However, the Basic Authentication seems not to work with this new version (documentation taken from here: http://www.sinatrarb.com/faq.html#test_http_auth).

We did some debugging and found out that somehow jetty throws away the Basic Authentication Header. This behavior could be reproduced with Google Chrome (16.0.912.77) and Firefox (9.0.1). Strangly it could not be reproduced with curl (even when we faked the header so that it looked like chrome).

For now we downgraded to Sinatra 1.3.1 and it works again.

We didn't change anything with jetty.