-
Bug
-
Resolution: Done
-
Blocker
-
1.2.2.Final
-
None
When securing a downstream API using Basic Auth, APIMan is providing the scheme name in uppercase e.g. BASIC instead of Basic
"headers": { "Authorization": "BASIC dXNlcm5hbWU6cGFzc3dvcmQ=", },
According to the specification, Basic is the correct scheme to use.
This is preventing the downstream server/service to recognise the Basic authentication header, as it only recognises the Basic scheme and not BASIC that APIMan is sending.
Is this a configurable property? The majority of articles online refer to the Basic Authorization scheme. This is marked as a blocker as our current servers do not recognise the BASIC scheme.