Fix optional and bad whitespace parsing in auth-param

2 files changed, 5 insertions, 1 deletions

diff --git a/tests/test_descriptors.py b/tests/test_descriptors.py
index e37246a..7bf229f 100644
--- a/tests/test_descriptors.py
+++ b/tests/test_descriptors.py
@@ -576,6 +576,10 @@ def test_parse_auth_params_truncate_on_comma():
 def test_parse_auth_params_emptystr():
     from webob.descriptors import parse_auth_params
     eq_(parse_auth_params(''), {})
+    
+def test_parse_auth_params_bad_whitespace():
+    from webob.descriptors import parse_auth_params
+    eq_(parse_auth_params('a= "2 ", b =3, c=4 '), {'a': '2 ', 'b': '3', 'c': '4'})
 
 def test_authorization2():
     from webob.descriptors import parse_auth_params
diff --git a/webob/descriptors.py b/webob/descriptors.py
index 8d3ca25..c191e33 100644
--- a/webob/descriptors.py
+++ b/webob/descriptors.py
@@ -303,7 +303,7 @@ def serialize_content_range(value):
 
 
 
-_rx_auth_param = re.compile(r'([a-z]+)=(".*?"|[^,]*)(?:\Z|, *)')
+_rx_auth_param = re.compile(r'([a-z]+)[ \t]*=[ \t]*(".*?"|[^,]*?)[ \t]*(?:\Z|, *)')
 
 def parse_auth_params(params):
     r = {}