Case insensitivity in auth handler.

Author: MClarkDev

config/community/admins.json

@@ -1,3 +1,3 @@
 {
-	"admin": "changeme"
+	"admin": "5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8"
 }

pom.xml

@@ -116,7 +116,7 @@
 		<dependency>
 			<groupId>com.mclarkdev.tools</groupId>
 			<artifactId>liblog</artifactId>
-			<version>1.6.5</version>
+			<version>1.6.6</version>
 		</dependency>
 
 		<dependency>

src/main/java/org/barcodeapi/core/Config.java

@@ -8,7 +8,6 @@
 
 import com.mclarkdev.tools.libargs.LibArgs;
 import com.mclarkdev.tools.libextras.LibExtrasStreams;
-import com.mclarkdev.tools.liblog.LibLog;
 
 public class Config {
 

src/main/java/org/barcodeapi/server/core/SessionHelper.java

@@ -97,8 +97,8 @@ public static CachedSession getSession(Request request) {
 	/**
 	 * Validate a user based on the provided Authentication string.
 	 * 
-	 * @param request
-	 * @return
+	 * @param basicAuth BasicAuth encoded string
+	 * @return valid user name or null or no user found
 	 */
 	public static String validateUser(String basicAuth) {
 
@@ -131,10 +131,18 @@ public static String validateUser(String basicAuth) {
 		String uName = decoded.substring(0, split);
 		String pWord = decoded.substring(split + 1);
 
-		// Calculate the expected password hash
-		String passHash = LibExtrasHashes.sumSHA256(pWord.getBytes());
+		// Check if requested user exists
+		if (!(_admins.has(uName))) {
 
-		// Check if login exists in app config and return
-		return (passHash.equals(_admins.optString(uName)) ? uName : null);
+			// Fail if user not found
+			return null;
+		}
+
+		// Determine actual and expected password hashes
+		String passHashActual = LibExtrasHashes.sumSHA256(pWord.getBytes());
+		String passHashExpected = _admins.getString(uName).toUpperCase();
+
+		// Check if actual pass hash matches expected pass hash
+		return (passHashActual.equals(passHashExpected) ? uName : null);
 	}
 }