From 88dff0eae2770b3cb09a58af2052bc3061661a7d Mon Sep 17 00:00:00 2001 From: Simon Ser Date: Tue, 13 Feb 2024 10:40:52 +0100 Subject: [PATCH] auth/middleware: set WWW-Authenticate header field See RFC 6750 section 3. --- auth/middleware.go | 1 + 1 file changed, 1 insertion(+) diff --git a/auth/middleware.go b/auth/middleware.go index 508c4beea2542b6b606b98e95cbaffb1df5b4de7..a5a3527e50698b312398897b8dcaf4ac1ade338e 100644 --- a/auth/middleware.go +++ b/auth/middleware.go @@ -705,6 +705,7 @@ func RequireMiddleware(conf ini.File, apiconf string) func(http.Handler) http.Ha auth := r.Header.Get("Authorization") if auth == "" { + w.Header().Set("WWW-Authenticate", "Bearer") authError(w, `Authorization header is required. Expected 'Authorization: Bearer [token]'`, http.StatusUnauthorized) return }