Enum AuthHeaderVariant 

pub enum AuthHeaderVariant {
    LowercaseScheme,
    NoWhitespaceAfterScheme,
    TabBetweenSchemeAndToken,
    MultipleSpacesAfterScheme,
    DuplicateHeaderFirstWinsBenign,
    QuotedScheme,
    TrailingJunkAfterToken,
    ControlByteInToken,
}

Authorization-header smuggle variants.

Variants

LowercaseScheme

bearer <token> — lowercase scheme. RFC 7235 §2.1 says case-insensitive; some WAFs match literally and miss it.

NoWhitespaceAfterScheme

Bearer<token> — no whitespace between scheme and token. RFC says 1*SP; some lenient parsers join them.

TabBetweenSchemeAndToken

Bearer\t<token> — TAB instead of SP between scheme and token. RFC 5234 allows SP only in 1*SP; lax parsers accept any LWS.

MultipleSpacesAfterScheme

Bearer <token> — multiple spaces (3-7 chosen randomly) instead of 1*SP. Some strict parsers reject; most accept.

DuplicateHeaderFirstWinsBenign

Two Authorization: header lines with different tokens. header_lines returns both. WAF takes first; origin may take last → privilege escalation differential.

QuotedScheme

"Bearer" <token> — scheme wrapped in double quotes. Strict RFC rejects; some lax parsers strip.

TrailingJunkAfterToken

Bearer <token> trailing junk — extra bytes after the token. Most parsers stop at whitespace; WAFs scanning the whole value see the trailing payload.

ControlByteInToken

Bearer <token-with-ctl-byte> — control byte inserted into the token. Strict parsers reject; lax parsers strip.

Trait Implementations

impl Clone for AuthHeaderVariant

fn clone(&self) -> AuthHeaderVariant

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for AuthHeaderVariant

impl Debug for AuthHeaderVariant

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for AuthHeaderVariant

impl Hash for AuthHeaderVariant

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for AuthHeaderVariant

fn eq(&self, other: &AuthHeaderVariant) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for AuthHeaderVariant