commit d5c36b799a64a49871e4532e9d4dc1fed568c255
author Jason Peterson <jasonpet@us.ibm.com> Mon Aug 28 15:24:21 2017 -0400
committer Carlos Santana <csantana23@gmail.com> Mon Aug 28 15:24:21 2017 -0400
tree a34f2fb5c9eb8b6a7933ad9941c75e5839cdaaf6
parent 9571cbcca1873478e67ee43a223135c6c64a5c6f

When auth header is missing send WWW-Authenticate header and a 401 (#127)

provider/lib/utils.js

diff --git a/provider/lib/utils.js b/provider/lib/utils.js
index bca66cb..f7cd444 100644
--- a/provider/lib/utils.js
+++ b/provider/lib/utils.js
@@ -373,7 +373,9 @@
         if (utils.endpointAuth) {
 
             if (!req.headers.authorization) {
-                return utils.sendError(method, HttpStatus.BAD_REQUEST, 'Malformed request, authentication header expected', res);
+                res.set('www-authenticate', 'Basic realm="Private"');
+                res.status(HttpStatus.UNAUTHORIZED);
+                return res.send('');
             }
 
             var parts = req.headers.authorization.split(' ');