diff --git a/middleware/ReverseProxyAuthMiddleware.php b/middleware/ReverseProxyAuthMiddleware.php index 952cbce0..92423752 100644 --- a/middleware/ReverseProxyAuthMiddleware.php +++ b/middleware/ReverseProxyAuthMiddleware.php @@ -43,9 +43,14 @@ class ReverseProxyAuthMiddleware extends AuthMiddleware if (count($username) !== 1) { // Invalid configuration of Proxy - throw new \Exception('ReverseProxyAuthMiddleware: ' . GROCY_REVERSE_PROXY_AUTH_HEADER . ' header is missing or invalid'); + throw new \Exception('ReverseProxyAuthMiddleware: ' . GROCY_REVERSE_PROXY_AUTH_HEADER . ' header is missing'); } $username = $username[0]; + if (strlen($username) === 0) + { + // Header is empty + throw new \Exception('ReverseProxyAuthMiddleware: ' . GROCY_REVERSE_PROXY_AUTH_HEADER . ' header is invalid'); + } } $user = $db->users()->where('username', $username)->fetch();