commit 5e5b57b6ea2b4bdc60fdbe31499ba866d01a669c
author Jason Peterson <jasonpet@us.ibm.com> Mon Aug 28 15:23:37 2017 -0400
committer Carlos Santana <csantana23@gmail.com> Mon Aug 28 15:23:37 2017 -0400
tree 77b93d0e760eb3b4d1566d2f21e3de5f12d66617
parent ae18d43738669748a3ac76fdd96587fe9993eb25

When auth header is missing send WWW-Authenticate header and a 401 (#87)

provider/lib/utils.js

diff --git a/provider/lib/utils.js b/provider/lib/utils.js
index 25935d0..0949ddc 100644
--- a/provider/lib/utils.js
+++ b/provider/lib/utils.js
@@ -324,7 +324,9 @@
         if (utils.endpointAuth) {
 
             if (!req.headers.authorization) {
-                return utils.sendError(method, HttpStatus.BAD_REQUEST, 'Malformed request, authentication header expected', res);
+                res.set('www-authenticate', 'Basic realm="Private"');
+                res.status(HttpStatus.UNAUTHORIZED);
+                return res.send('');
             }
 
             var parts = req.headers.authorization.split(' ');