~bigbes/core-go

89b1b48997a8f402408f3237f9853062987baefc — Simon Ser 3 years ago 209e1a8
auth/middleware: make auth scheme case-insensitive

According to RFC 7235 section 2.1, the auth scheme is
case-insensitive.
1 files changed, 3 insertions(+), 3 deletions(-)

M auth/middleware.go
M auth/middleware.go => auth/middleware.go +3 -3
@@ 695,8 695,8 @@ func Middleware(conf ini.File, apiconf string) func(http.Handler) http.Handler {
			}

			var bearer string
			switch z[0] {
			case "Bearer":
			switch strings.ToLower(z[0]) {
			case "bearer":
				token := []byte(z[1])
				if oauth2BearerRegex.Match(token) {
					hash := sha512.Sum512(token)


@@ 712,7 712,7 @@ func Middleware(conf ini.File, apiconf string) func(http.Handler) http.Handler {
				}
				authError(w, "Invalid OAuth bearer token", http.StatusBadRequest)
				return
			case "Internal":
			case "internal":
				payload := []byte(z[1])
				internalAuth(internalNet, payload, w, r, next)
				return