romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-25 07:43:32 +03:00
Code Issues Projects Releases Packages Wiki Activity

http: custom Authorization: header overrides Negotiate

Browse source 
As documented and as it does for other methods.

Difficult to test since it needs a successful kerberos ticket.

Reported-by: sdgh179 on github
Fixes #22610
Closes #22622
This commit is contained in:
Daniel Stenberg 2026-08-19 09:32:16 +02:00
parent fc6c67ce86
commit 9b29495863
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
1 changed files with 13 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

17
lib/http.c
View file

@ -687,10 +687,19 @@ static CURLcode output_auth_headers(struct Curl_easy *data,
#endif
#ifdef USE_SPNEGO
if(authstatus->picked == CURLAUTH_NEGOTIATE) {
auth = "Negotiate";
result = Curl_output_negotiate(data, conn, proxy);
if(result)
return result;
if(
#ifndef CURL_DISABLE_PROXY
(proxy && !Curl_checkProxyheaders(data, conn,
STRCONST("Proxy-authorization"))) ||
#endif
(!proxy && !Curl_checkheaders(data, STRCONST("Authorization")))) {
auth = "Negotiate";
result = Curl_output_negotiate(data, conn, proxy);
if(result)
return result;
}
else
authstatus->done = TRUE;
}
else
#endif