Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[SecurityBundle] Do not translate Bearer header’s error_description #50819

Merged
merged 1 commit into from Jun 29, 2023

Conversation

MatTheCat
Copy link
Contributor

@MatTheCat MatTheCat commented Jun 29, 2023

Q A
Branch? 6.2
Bug fix? yes
New feature? no
Deprecations? no
Tickets Fix #50811
License MIT
Doc PR N/A

From RFC 6750:

the "error_description" attribute [provides] a human-readable explanation that is not meant to be displayed to end-users.

Not translating it avoids non-ASCII characters in Bearer’s value, which in turn avoid messing with RFC 8187 (fun read; thanks @derrabus!).

Not sure if and how this should be tested 🤔

@carsonbot carsonbot changed the title [Security] Does not translate Bearer header’s error_description [SecurityBundle] Does not translate Bearer header’s error_description Jun 29, 2023
@nicolas-grekas nicolas-grekas changed the title [SecurityBundle] Does not translate Bearer header’s error_description [SecurityBundle] Do not translate Bearer header’s error_description Jun 29, 2023
@nicolas-grekas
Copy link
Member

Thank you @MatTheCat.

@nicolas-grekas nicolas-grekas merged commit c3a0de5 into symfony:6.2 Jun 29, 2023
3 of 4 checks passed
@MatTheCat MatTheCat deleted the ticket_50811 branch June 29, 2023 10:03
This was referenced Jul 30, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

5 participants