From d2c2962ad1bcfc54d954f87df71bd74d681a0109 Mon Sep 17 00:00:00 2001
From: williams <automation@reauktion.de>
Date: Sat, 30 May 2026 12:55:02 +0000
Subject: [PATCH] fix: case-insensitive Bearer token parsing in auth header

---
 lmcp.lua | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lmcp.lua b/lmcp.lua
index 772687c..df3875d 100644
--- a/lmcp.lua
+++ b/lmcp.lua
@@ -939,7 +939,7 @@ local function _check_auth(self, conn)
     if not self._auth_token then return true end
     if conn.method == "OPTIONS" then return true end
     local auth = conn.headers["authorization"] or ""
-    local token = auth:match("^Bearer%s+(.+)$")
+    local token = auth:match("^[Bb]earer%s+(.+)$")
     return token == self._auth_token
 end
 
-- 
2.47.3