Do not remove AUTHORIZATION header

This header should be removed only if basic auth handled by server.
aio-libs · Nov 28, 2015 · 5f305f0 · 5f305f0
1 parent 0e4f91e
commit 5f305f0
Show file tree

Hide file tree

Showing 4 changed files with 6 additions and 3 deletions.
diff --git a/.venv/lib64 b/.venv/lib64
@@ -0,0 +1 @@
+lib
diff --git a/.venv/pip-selfcheck.json b/.venv/pip-selfcheck.json
@@ -0,0 +1 @@
+{"last_check":"2015-11-18T19:59:32Z","pypi_version":"7.1.2"}
diff --git a/.venv/pyvenv.cfg b/.venv/pyvenv.cfg
@@ -0,0 +1,3 @@
+home = /usr/bin
+include-system-site-packages = false
+version = 3.4.3
diff --git a/aiohttp/wsgi.py b/aiohttp/wsgi.py
@@ -66,9 +66,7 @@ def create_wsgi_environ(self, message, payload):
         script_name = self.SCRIPT_NAME
 
         for hdr_name, hdr_value in message.headers.items():
-            if hdr_name == 'AUTHORIZATION':
-                continue
-            elif hdr_name == 'SCRIPT_NAME':
+            if hdr_name == 'SCRIPT_NAME':
                 script_name = hdr_value
             elif hdr_name == 'CONTENT-TYPE':
                 environ['CONTENT_TYPE'] = hdr_value