[Django] #36443: Inconsistency when using custom authentication header
2 views
Skip to first unread message
Django
unread,
Jun 6, 2025, 7:06:17 AM (6 days ago) Jun 6
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to django-...@googlegroups.com
#36443: Inconsistency when using custom authentication header
-------------------------+----------------------------------------
Reporter: trick77 | Type: Bug
Status: new | Component: contrib.auth
Version: 5.2 | Severity: Normal
Keywords: | Triage Stage: Unreviewed
Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
-------------------------+----------------------------------------
process_request() and aprocess_request() don't handle the custom
authentication header the same way. The async function adds a HTTP_
prefix, the other does not do so. This breaks existing Django setups which
use a custom HTTP_* authentication header when migrating from pre-5.2.*
setups (translates to HTTP_HTTP_*).