Merge remote-tracking branch 'origin/pr/159'

Fixes the Auth-Param header to remove bad white space in accordance with RFC7235. Closes #159
Pylons · Apr 4, 2015 · 830e44e · 830e44e
2 parents 5ba5521 + 92e3595
commit 830e44e
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/tests/test_descriptors.py b/tests/test_descriptors.py
@@ -576,6 +576,10 @@ def test_parse_auth_params_truncate_on_comma():
 def test_parse_auth_params_emptystr():
     from webob.descriptors import parse_auth_params
     eq_(parse_auth_params(''), {})
+
+def test_parse_auth_params_bad_whitespace():
+    from webob.descriptors import parse_auth_params
+    eq_(parse_auth_params('a= "2 ", b =3, c=4 '), {'a': '2 ', 'b': '3', 'c': '4'})
 
 def test_authorization2():
     from webob.descriptors import parse_auth_params

diff --git a/webob/descriptors.py b/webob/descriptors.py
@@ -303,7 +303,7 @@ def serialize_content_range(value):
 
 
 
-_rx_auth_param = re.compile(r'([a-z]+)=(".*?"|[^,]*)(?:\Z|, *)')
+_rx_auth_param = re.compile(r'([a-z]+)[ \t]*=[ \t]*(".*?"|[^,]*?)[ \t]*(?:\Z|, *)')
 
 def parse_auth_params(params):
     r = {}