Merge pull request 'fix: case-insensitive Bearer token parsing in auth header' (#25) from williams/lmcp:fix/case-insensitive-bearer-auth into master

Reviewed-on: marfrit/lmcp#25
2026-05-30 14:43:37 +00:00
parent c5375b8a77 d2c2962ad1
commit 839380f223
1 changed files with 1 additions and 1 deletions
@@ -939,7 +939,7 @@ local function _check_auth(self, conn)
    if not self._auth_token then return true end
    if conn.method == "OPTIONS" then return true end
    local auth = conn.headers["authorization"] or ""
-    local token = auth:match("^Bearer%s+(.+)$")
+    local token = auth:match("^[Bb]earer%s+(.+)$")
    return token == self._auth_token
 end