fix: Authorization header can be an empty string

Signed-off-by: Julius Härtl <jus@bitgrid.net>
nextcloud · Jun 27, 2024 · cd3cad0 · cd3cad0
1 parent 00aa8f5
commit cd3cad0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/apps/dav/lib/Connector/Sabre/Auth.php b/apps/dav/lib/Connector/Sabre/Auth.php
@@ -185,7 +185,7 @@ private function auth(RequestInterface $request, ResponseInterface $response): a
 				//Fix for broken webdav clients
 				($this->userSession->isLoggedIn() && is_null($this->session->get(self::DAV_AUTHENTICATED))) ||
 				//Well behaved clients that only send the cookie are allowed
-				($this->userSession->isLoggedIn() && $this->session->get(self::DAV_AUTHENTICATED) === $this->userSession->getUser()->getUID() && $request->getHeader('Authorization') === null) ||
+				($this->userSession->isLoggedIn() && $this->session->get(self::DAV_AUTHENTICATED) === $this->userSession->getUser()->getUID() && empty($request->getHeader('Authorization'))) ||
 				\OC_User::handleApacheAuth()
 			) {
 				$user = $this->userSession->getUser()->getUID();