fix: case-insensitive Bearer token parsing in auth header #25
@@ -939,7 +939,7 @@ local function _check_auth(self, conn)
|
||||
if not self._auth_token then return true end
|
||||
if conn.method == "OPTIONS" then return true end
|
||||
local auth = conn.headers["authorization"] or ""
|
||||
local token = auth:match("^Bearer%s+(.+)$")
|
||||
local token = auth:match("^[Bb]earer%s+(.+)$")
|
||||
return token == self._auth_token
|
||||
end
|
||||
|
||||
|
||||
Reference in New Issue
Block a user