From 8054b019bdca47df5676e40e19cbde7e68827640 Mon Sep 17 00:00:00 2001 From: Aki Tuomi Date: Fri, 17 Feb 2017 15:44:17 +0200 Subject: [PATCH] mech-oauth2: Fix gs2-header parsing --- src/auth/mech-oauth2.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/auth/mech-oauth2.c b/src/auth/mech-oauth2.c index 03477d9d9b..65a4c8629d 100644 --- a/src/auth/mech-oauth2.c +++ b/src/auth/mech-oauth2.c @@ -178,7 +178,7 @@ mech_oauthbearer_auth_continue(struct auth_request *request, } /* the first field is specified by RFC5801 as gs2-header */ - for(ptr = t_strsplit(fields[0], ","); *ptr != NULL; ptr++) { + for(ptr = t_strsplit_spaces(fields[0], ","); *ptr != NULL; ptr++) { switch(*ptr[0]) { case 'f': auth_request_log_info(request, AUTH_SUBSYS_MECH, @@ -207,6 +207,7 @@ mech_oauthbearer_auth_continue(struct auth_request *request, "%s", error); } + break; default: auth_request_log_info(request, AUTH_SUBSYS_MECH, "Invalid gs2-header in request"); -- 2.47.3