go-goyave / goyave / 33488016634

97%

push

github

fix(auth): return 401 on unknown user in basic authenticator (#291)

Reflect-based password field extraction ran before the
record-not-found check, so a nil user (gorm.ErrRecordNotFound)
caused a reflect panic instead of returning a localized
invalid-credentials error. Return early when the user is not
found and add a regression test.

4 of 4 new or added lines in 1 file covered. (100.0%)

5642 of 5807 relevant lines covered (97.16%)

273.73 hits per line