Created attachment 28519 [details] patch file for test org.apache.catalina.authenticator.TestNonLoginAndBasicAuthenticator RFC2617 states the authentication scheme is case-insensitive. A new test case has been added which confirms that tomcat already complies with the requirement. The attached patch file passes checkstyle and all tests run successfully against the trunk.
Thanks for the additional test. Applied to trunk and 7.0.x and will included in 7.0.28 onwards.