In JetBrains Ktor before 2.1.0 the wrong authentication provider could be selected in some cases
CWE-287, CWE-287