From 89b1b48997a8f402408f3237f9853062987baefc Mon Sep 17 00:00:00 2001
From: Simon Ser <contact@emersion.fr>
Date: Thu, 6 Apr 2023 17:04:08 +0000
Subject: [PATCH] auth/middleware: make auth scheme case-insensitive

According to RFC 7235 section 2.1, the auth scheme is
case-insensitive.
---
 auth/middleware.go | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/auth/middleware.go b/auth/middleware.go
index 361bb62e4cdf81595872d7df4b2fcfb46698ab6b..61ab5d69cc2642ec4e32712186f29bab5dd34427 100644
--- a/auth/middleware.go
+++ b/auth/middleware.go
@@ -695,8 +695,8 @@ func Middleware(conf ini.File, apiconf string) func(http.Handler) http.Handler {
 			}
 
 			var bearer string
-			switch z[0] {
-			case "Bearer":
+			switch strings.ToLower(z[0]) {
+			case "bearer":
 				token := []byte(z[1])
 				if oauth2BearerRegex.Match(token) {
 					hash := sha512.Sum512(token)
@@ -712,7 +712,7 @@ func Middleware(conf ini.File, apiconf string) func(http.Handler) http.Handler {
 				}
 				authError(w, "Invalid OAuth bearer token", http.StatusBadRequest)
 				return
-			case "Internal":
+			case "internal":
 				payload := []byte(z[1])
 				internalAuth(internalNet, payload, w, r, next)
 				return