Check that the authorization header is providing Digest credentials

StephenBonikowsky · Mar 26, 2018 · c7dd17e · c7dd17e
1 parent 2310ca1
commit c7dd17e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...vate.ServiceModel/tools/IISHostedWcfService/App_code/DigestServiceAuthorizationManager.cs b/...vate.ServiceModel/tools/IISHostedWcfService/App_code/DigestServiceAuthorizationManager.cs
@@ -145,7 +145,7 @@ public DigestAuthenticationState(OperationContext operationContext, string realm
                 _password = null;
                 _authorized = new bool?();
                 _authorizationHeader = GetAuthorizationHeader(operationContext, out _method);
-                if (_authorizationHeader.Length < DigestAuthenticationMechanismLength)
+                if (_authorizationHeader.Length < DigestAuthenticationMechanismLength || !_authorizationHeader.StartsWith(DigestAuthenticationMechanism))
                 {
                     _authorized = false;
                     _nonceString = string.Empty;