Merge pull request #372 from jonaspm/fix/broader-bearer-token-resolution

fix: Match Bearer case-insensitively and trim whitespace(s)
This commit is contained in:
dswbx
2026-03-28 10:35:43 +01:00
committed by GitHub
4 changed files with 31 additions and 2 deletions
+1 -1
View File
@@ -121,7 +121,7 @@ export class Api {
}
// try authorization header
const headerToken = this.options.headers.get("authorization")?.replace("Bearer ", "");
const headerToken = this.options.headers.get("authorization")?.replace(/^Bearer\s+/i, "");
if (headerToken) {
this.token_transport = "header";
this.updateToken(headerToken);
+1 -1
View File
@@ -430,7 +430,7 @@ export class Authenticator<
let token: string | undefined;
if (headers.has("Authorization")) {
const bearerHeader = String(headers.get("Authorization"));
token = bearerHeader.replace("Bearer ", "");
token = bearerHeader.replace(/^Bearer\s+/i, "");
} else {
const context = is_context ? (c as Context) : ({ req: { raw: { headers } } } as Context);
token = await this.getAuthCookie(context);