Commit 06b4f1af authored by Łukasz Nowak's avatar Łukasz Nowak Committed by Rafael Monnerat

Header for auth type is case insensitive (rfc2617)

parent f55c9148
......@@ -108,7 +108,7 @@ class ERP5BearerExtractionPlugin(BasePlugin):
token = None
if request._auth is not None:
# 1st - try to fetch from Authorization header
if 'Bearer' in request._auth:
if 'bearer' in request._auth.lower():
l = request._auth.split()
if len(l) == 2:
token = l[1]
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment