Summary
In both BasicAuthenticationFilter and DigestAuthenticationFilter the schema is compared case sensitive.
but
According to rfc7235 authentication schema should be case-insensitive.
Wording is a bit ambiguous but I'm also seeing similar changes to other projects: jboss rails
Actual Behavior
Authentication BASIC or Authentication basic won't work.
Expected Behavior
Authentication BASIC, Authentication Basic, Authentication basic, Authentication BaSiC should all work.
Version
All versions are affected.
I can create a PR if needed.
Comment From: marcorosi
+1
Comment From: achiinto
+1 reproduced at 4.2.1
Comment From: andrei-chirinciuc
+1 reproduced in 4.2.3 too