Check that the authorization header is providing Digest credentials

dotnet · Mar 22, 2018 · f81ca26 · f81ca26
1 parent 13c9efb
commit f81ca26
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...vate.ServiceModel/tools/IISHostedWcfService/App_code/DigestServiceAuthorizationManager.cs b/...vate.ServiceModel/tools/IISHostedWcfService/App_code/DigestServiceAuthorizationManager.cs
@@ -145,7 +145,7 @@ public DigestAuthenticationState(OperationContext operationContext, string realm
                 _password = null;
                 _authorized = new bool?();
                 _authorizationHeader = GetAuthorizationHeader(operationContext, out _method);
-                if (_authorizationHeader.Length < DigestAuthenticationMechanismLength)
+                if (_authorizationHeader.Length < DigestAuthenticationMechanismLength || !_authorizationHeader.StartsWith(DigestAuthenticationMechanism))
                 {
                     _authorized = false;
                     _nonceString = string.Empty;