rails/rails — pull request #9951 by lau (2013-03-27 15:25:49+00:00)
Title: Do not allow HTTP Basic Auth with Base64 encrypted blank credentials

In HTTP Basic Auth, blank credentials are not allowed. But today, if Base64 encryption is used, the login procedure block is called anyway. This PR fixes the issue and has tests. The issue was reported in #9172.