From: Mikael Nordfeldth <mmn@hethane.se>
Date: Mon, 10 Nov 2014 11:17:39 +0000 (+0100)
Subject: Present WWW-Authenticate on failure to authenticate
X-Git-Url: https://git.mxchange.org/?a=commitdiff_plain;h=34f6ea1d041fef0466988fd855f79659dc6ee2fe;p=quix0rs-gnu-social.git

Present WWW-Authenticate on failure to authenticate
---

diff --git a/lib/apiauthaction.php b/lib/apiauthaction.php
index 0a1e0b8e24..40161b7ab5 100644
--- a/lib/apiauthaction.php
+++ b/lib/apiauthaction.php
@@ -317,11 +317,14 @@ class ApiAuthAction extends ApiAction
                     $this->auth_user_nickname
                 );
                 $this->logAuthFailure($msg);
+
+                // We must present WWW-Authenticate in accordance to HTTP status code 401
+                header('WWW-Authenticate: Basic realm="' . $realm . '"');
                 // TRANS: Client error thrown when authentication fails.
                 $this->clientError(_('Could not authenticate you.'), 401);
             }
         } else {
-            // all get rw access for actions that don't need auth
+            // all get rw access for actions that don't require auth
             $this->access = self::READ_WRITE;
         }
     }