Authorization scheme for HTTP Basic Authentication should be case insensitive

[rlander]

Hi,

According to RFC 2617, the authorization scheme should be case insensitive; thus, Basic and basic should both be valid.

Here's the relevant part:

HTTP provides a simple challenge-response authentication mechanism
that MAY be used by a server to challenge a client request and by a
client to provide authentication information. It uses an extensible,
case-insensitive token to identify the authentication scheme...

Thanks!