go-goyave / goyave / 33487756934

97%

master: 97%

Pull #291

github

fix(auth): return 401 on unknown user in basic authenticator

Reflect-based password field extraction ran before the
record-not-found check, so a nil user (gorm.ErrRecordNotFound)
caused a reflect panic instead of returning a localized
invalid-credentials error. Return early when the user is not
found and add a regression test.

4 of 4 new or added lines in 1 file covered. (100.0%)

5642 of 5807 relevant lines covered (97.16%)

273.74 hits per line