Skip to content

Commit 53ecdf1

Browse files
committed
feat(serverHandler): remove Authorization from Vary header
There is no need to send the Authorization field name in Vary. See also: https://www.rfc-editor.org/rfc/rfc9110.html#section-12.5.5-12
1 parent 7238db2 commit 53ecdf1

File tree

1 file changed

+0
-4
lines changed

1 file changed

+0
-4
lines changed

src/serverHandler/vhostHandler.go

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -67,10 +67,6 @@ func NewVhostHandler(
6767
pageVarys = append(pageVarys, "Referer", "Origin")
6868
contentVarys = append(contentVarys, "Referer", "Origin")
6969
}
70-
if p.GlobalAuth || len(p.AuthUrls) > 0 || len(p.AuthDirs) > 0 {
71-
pageVarys = append(pageVarys, "Authorization")
72-
contentVarys = append(contentVarys, "Authorization")
73-
}
7470

7571
pageVaryV1 := strings.Join(pageVarys, ", ")
7672
contentVaryV1 := strings.Join(contentVarys, ", ")

0 commit comments

Comments
 (0)