commit 28546b40ec1de46bc826ff88236791c0b2cdcf31
author Taylor King <taylorbradleyking@gmail.com> Wed Jul 19 14:15:42 2017 -0400
committer Matt Hamann <matthew.hamann@gmail.com> Wed Jul 19 14:15:42 2017 -0400
tree 4660196ef34f50a18cb0774f2197983f39871ccf
parent 81c76fb2199c077ae7ecb1a7efa11a8e001cb24a

lower case bearer (#252)

scripts/lua/policies/security/oauth2.lua

diff --git a/scripts/lua/policies/security/oauth2.lua b/scripts/lua/policies/security/oauth2.lua
index f54e719..21a8e81 100644
--- a/scripts/lua/policies/security/oauth2.lua
+++ b/scripts/lua/policies/security/oauth2.lua
@@ -39,7 +39,8 @@
     request.err(401, "No Authorization header provided")
     return nil
   end
-  accessToken = string.gsub(accessToken, '^Bearer%s', '')
+
+  accessToken = string.gsub(accessToken, '^[B|b][E|e][A|a][R|r][E|e][R|r]%s', '')
 
   local token = exchange(dataStore, accessToken, securityObj.provider, securityObj)
   if token == nil then