← Commit list

e3d7401a32

Daniel Stenberg

2026-03-07

SUCCESS Duration: 255s

Subject

http: only send bearer if auth is allowed

Binary

No binary (build failed)

Architecture & Compiler Flags

Architecture: x86_64-linux-gnu Compiler: gcc (Ubuntu 11.4.0-1ubuntu1~22.04.3) 11.4.0

—

Build Log

(log yok)

Commit Diff GitHub →

lib/http.c +1 -0 tests/data/Makefile.am +1 -1 tests/data/test2006 +98 -0

lib/http.c+1 -0

@@ -705,6 +705,7 @@ static CURLcode output_auth_headers(struct Curl_easy *data,
	if(authstatus->picked == CURLAUTH_BEARER) {
	/* Bearer */
	if(!proxy && data->set.str[STRING_BEARER] &&
+	Curl_auth_allowed_to_host(data) &&
	!Curl_checkheaders(data, STRCONST("Authorization"))) {
	auth = "Bearer";
	result = http_output_bearer(data);

tests/data/Makefile.am+1 -1

@@ -243,7 +243,7 @@ test1955 test1956 test1957 test1958 test1959 test1960 test1964 \
	test1970 test1971 test1972 test1973 test1974 test1975 test1976 test1977 \
	test1978 test1979 test1980 test1981 \
	\
-	test2000 test2001 test2002 test2003 test2004 test2005 \
+	test2000 test2001 test2002 test2003 test2004 test2005 test2006 \
	\
	test2023 \
	test2024 test2025 test2026 test2027 test2028 test2029 test2030 test2031 \

tests/data/test2006+98 -0

@@ -0,0 +1,98 @@
+	<?xml version="1.0" encoding="US-ASCII"?>
+	<testcase>
+	<info>
+	<keywords>
+	netrc
+	HTTP
+	</keywords>
+	</info>
+	# Server-side
+	<reply>
+	<data crlf="headers">
+	HTTP/1.1 301 Follow this you fool
+	Date: Tue, 09 Nov 2010 14:49:00 GMT
+	Server: test-server/fake
+	Last-Modified: Tue, 13 Jun 2000 12:10:00 GMT
+	ETag: "21025-dc7-39462498"
+	Accept-Ranges: bytes
+	Content-Length: 6
+	Connection: close
+	Location: http://b.com/%TESTNUMBER0002
+
+	-foo-
+	</data>
+
+	<data2 crlf="headers">
+	HTTP/1.1 200 OK
+	Date: Tue, 09 Nov 2010 14:49:00 GMT
+	Server: test-server/fake
+	Last-Modified: Tue, 13 Jun 2000 12:10:00 GMT
+	ETag: "21025-dc7-39462498"
+	Accept-Ranges: bytes
+	Content-Length: 7
+	Connection: close
+
+	target
+	</data2>
+
+	<datacheck crlf="headers">
+	HTTP/1.1 301 Follow this you fool
+	Date: Tue, 09 Nov 2010 14:49:00 GMT
+	Server: test-server/fake
+	Last-Modified: Tue, 13 Jun 2000 12:10:00 GMT
+	ETag: "21025-dc7-39462498"
+	Accept-Ranges: bytes
+	Content-Length: 6
+	Connection: close
+	Location: http://b.com/%TESTNUMBER0002
+
+	HTTP/1.1 200 OK
+	Date: Tue, 09 Nov 2010 14:49:00 GMT
+	Server: test-server/fake
+	Last-Modified: Tue, 13 Jun 2000 12:10:00 GMT
+	ETag: "21025-dc7-39462498"
+	Accept-Ranges: bytes
+	Content-Length: 7
+	Connection: close
+
+	target
+	</datacheck>
+	</reply>
+
+	# Client-side
+	<client>
+	<server>
+	http
+	</server>
+	<features>
+	proxy
+	</features>
+	<name>
+	.netrc default with redirect plus oauth2-bearer
+	</name>
+	<command>
+	--netrc --netrc-file %LOGDIR/netrc%TESTNUMBER --oauth2-bearer SECRET_TOKEN -L -x http://%HOSTIP:%HTTPPORT/ http://a.com/
+	</command>
+	<file name="%LOGDIR/netrc%TESTNUMBER" >
+	default login testuser password testpass
+	</file>
+	</client>
+
+	<verify>
+	<protocol crlf="headers">
+	GET http://a.com/ HTTP/1.1
+	Host: a.com
+	Authorization: Bearer SECRET_TOKEN
+	User-Agent: curl/%VERSION
+	Accept: /
+	Proxy-Connection: Keep-Alive
+
+	GET http://b.com/%TESTNUMBER0002 HTTP/1.1
+	Host: b.com
+	User-Agent: curl/%VERSION
+	Accept: /
+	Proxy-Connection: Keep-Alive
+
+	</protocol>
+	</verify>
+	</testcase>