fix: case-insensitive Bearer token parsing in auth header #1

Closed
williams wants to merge 1 commits from fix/case-insensitive-bearer-auth into master
+1 -1
View File
@@ -939,7 +939,7 @@ local function _check_auth(self, conn)
if not self._auth_token then return true end if not self._auth_token then return true end
if conn.method == "OPTIONS" then return true end if conn.method == "OPTIONS" then return true end
local auth = conn.headers["authorization"] or "" local auth = conn.headers["authorization"] or ""
local token = auth:match("^Bearer%s+(.+)$") local token = auth:match("^[Bb]earer%s+(.+)$")
return token == self._auth_token return token == self._auth_token
end end