Change authorization header to case insensitive header

XMLWordPrintable

    • 1
    • 13

      An API request with Authorization and token_type "bearer" - "Authorization: bearer ...." fails

      With the same request using token_type "Bearer" (with a capital B) - "Authorization: Bearer ......" succeeds

      The problem is caused in the "oauth2/access_token" request. The request returns an invalid "token_type" with lowercase 'b', which is not working as the previous 2 request proved.

      Sample OAuth output:

      {"access_token": ".............", "scopes": "........", "expires_in": 3600, "refresh_token": "........", "token_type": "bearer"}

      Suggested solution:

      1. The authentication should allow OAuth2 tokens with "Authorization: Bearer" and "Authorization: bearer" or
      2. The "oauth2/access_token" should return the correct "token_type": "Bearer" with capital B

            Assignee:
            Unassigned
            Reporter:
            Ronald C.
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: