Fix of Auth::Abstract::Handler to return headers within spec.

401 and 400 responses must have Content-Type and Content-Length defined.

1 files changed, 11 insertions, 2 deletions

diff --git a/lib/rack/auth/abstract/handler.rb b/lib/rack/auth/abstract/handler.rb
index b213eac6..8489c9b9 100644
--- a/lib/rack/auth/abstract/handler.rb
+++ b/lib/rack/auth/abstract/handler.rb
@@ -16,11 +16,20 @@ module Rack
       private
 
       def unauthorized(www_authenticate = challenge)
-        return [ 401, { 'WWW-Authenticate' => www_authenticate.to_s }, [] ]
+        return [ 401,
+          { 'Content-Type' => 'text/plain',
+            'Content-Length' => '0',
+            'WWW-Authenticate' => www_authenticate.to_s },
+          []
+        ]
       end
 
       def bad_request
-        [ 400, {}, [] ]
+        return [ 400,
+          { 'Content-Type' => 'text/plain',
+            'Content-Length' => '0' },
+          []
+        ]
       end
 
     end