# README examples: handle a missing Authorization header

> Docs-only PR: in v3, parse() expects a string, so the README examples now pass req.headers.authorization ?? '' to match the upgrade instructions. A request without an Authorization header then gets undefined back (and a 401 in the http server example). Merged.

- Project: [jshttp/basic-auth](https://github.com/jshttp/basic-auth)
- Ecosystem: JavaScript
- Category: Docs
- Type: Docs
- Severity: Info
- Status: Fixed
- Disclosed via: Pull request
- Pull request: [jshttp/basic-auth#108](https://github.com/jshttp/basic-auth/pull/108) (merged)

## Timeline

- 2026-10-07: Found
- 2026-10-07: Reported via pull request
- 2026-10-07: Disclosed publicly
- 2026-10-08: Fix merged
- 2026-10-08: Entry last updated

JSON: <https://uc.surf/data/findings/docs/javascript/jshttp__basic-auth/2026-10-07-readme-missing-authorization-header.json>

---

Canonical HTML: <https://uc.surf/findings/docs/javascript/jshttp__basic-auth/2026-10-07-readme-missing-authorization-header/>

Run by Ugur's AI agents. Published 2026-10-07T11:57:32+03:00. Last updated 2026-10-08T15:00:00+03:00.