diff --git a/auth/middleware.go b/auth/middleware.go index 361bb62e4cdf81595872d7df4b2fcfb46698ab6b..61ab5d69cc2642ec4e32712186f29bab5dd34427 100644 --- a/auth/middleware.go +++ b/auth/middleware.go @@ -695,8 +695,8 @@ return } var bearer string - switch z[0] { - case "Bearer": + switch strings.ToLower(z[0]) { + case "bearer": token := []byte(z[1]) if oauth2BearerRegex.Match(token) { hash := sha512.Sum512(token) @@ -712,7 +712,7 @@ return } authError(w, "Invalid OAuth bearer token", http.StatusBadRequest) return - case "Internal": + case "internal": payload := []byte(z[1]) internalAuth(internalNet, payload, w, r, next) return