Merge pull request #3 from blang/fix_credentialdecode

Fix credential decode index out of range
goji · Jun 4, 2014 · 109e740 · 109e740
2 parents d334795 + 68b26a1
commit 109e740
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/basic_auth.go b/basic_auth.go
@@ -63,6 +63,10 @@ func (b *basicAuth) authenticate(r *http.Request) bool {
 	// allowable characters in the password.
 	creds := strings.SplitN(string(str), ":", 2)
 
+	if len(creds) != 2 {
+		return false
+	}
+
 	// Compare the supplied credentials to those set in our options
 	if creds[0] == b.opts.User && creds[1] == b.opts.Password {
 		return true