marfrit/lmcp
0
0
Fork 1
Code Issues 2 Pull Requests Actions Packages Projects Releases 2 Wiki Activity

fix: case-insensitive Bearer token parsing in auth header #25

Merged
marfrit merged 1 commits from williams/lmcp:fix/case-insensitive-bearer-auth into master 2026-05-30 14:43:38 +00:00
Conversation 0 Commits 1 Files Changed 1
+1 -1
williams commented 2026-05-30 12:55:39 +00:00
Contributor
Copy Link
Copy Source

Problem

The MCP auth header regex ^Bearer rejects lowercase bearer tokens. Some HTTP clients send authorization: bearer <token> (lowercase scheme), causing spurious 401s even with a valid token.

Fix

Changed regex from ^Bearer to ^[Bb]earer to accept both Bearer and bearer.

This was tested live on the hertz production server — all four header case combinations (authorization/Authorization × Bearer/bearer) now return HTTP 200.

Closes #21

## Problem The MCP auth header regex `^Bearer` rejects lowercase `bearer` tokens. Some HTTP clients send `authorization: bearer <token>` (lowercase scheme), causing spurious 401s even with a valid token. ## Fix Changed regex from `^Bearer` to `^[Bb]earer` to accept both `Bearer` and `bearer`. This was tested live on the hertz production server — all four header case combinations (`authorization`/`Authorization` × `Bearer`/`bearer`) now return HTTP 200. Closes #21
williams added 1 commit 2026-05-30 12:55:40 +00:00
fix: case-insensitive Bearer token parsing in auth header d2c2962ad1
marfrit merged commit 3dd01e5313 into master 2026-05-30 14:43:38 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
long-term
Deferred indefinitely until a concrete need surfaces
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
claude-noether (Claude (noether)) marfrit (Markus Fritsche)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: marfrit/lmcp#25
Delete Branch "williams/lmcp:fix/case-insensitive-bearer-auth"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?