From 615354a9df0e43d36b823ae8b28772549edb113b Mon Sep 17 00:00:00 2001 From: Alexey Vasiliev Date: Sat, 20 Jul 2024 12:52:09 +0300 Subject: [PATCH] fix bearer check --- cmd/bearer_token_middleware.go | 2 +- go.mod | 2 +- go.sum | 4 ++-- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/cmd/bearer_token_middleware.go b/cmd/bearer_token_middleware.go index 9012c6b..b08c432 100644 --- a/cmd/bearer_token_middleware.go +++ b/cmd/bearer_token_middleware.go @@ -25,7 +25,7 @@ func Middleware(tokenVerificationFunc TokenVerificationFunc) gin.HandlerFunc { // The value of authorization header is invalid // It should start with "Bearer ", then the token value - if len(authTokens) != 2 || authTokens[0] != "Bearer" { + if len(authTokens) != 2 || strings.ToLower(authTokens[0]) != "bearer" { c.AbortWithStatus(http.StatusUnauthorized) return } diff --git a/go.mod b/go.mod index 13acf8e..003a31f 100644 --- a/go.mod +++ b/go.mod @@ -47,7 +47,7 @@ require ( go.uber.org/multierr v1.11.0 // indirect golang.org/x/arch v0.8.0 // indirect golang.org/x/crypto v0.25.0 // indirect - golang.org/x/exp v0.0.0-20240707233637-46b078467d37 // indirect + golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 // indirect golang.org/x/net v0.27.0 // indirect golang.org/x/sys v0.22.0 // indirect golang.org/x/text v0.16.0 // indirect diff --git a/go.sum b/go.sum index 01415a1..b289301 100644 --- a/go.sum +++ b/go.sum @@ -124,8 +124,8 @@ golang.org/x/arch v0.8.0 h1:3wRIsP3pM4yUptoR96otTUOXI367OS0+c9eeRi9doIc= golang.org/x/arch v0.8.0/go.mod h1:FEVrYAQjsQXMVJ1nsMoVVXPZg6p2JE2mx8psSWTDQys= golang.org/x/crypto v0.25.0 h1:ypSNr+bnYL2YhwoMt2zPxHFmbAN1KZs/njMG3hxUp30= golang.org/x/crypto v0.25.0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M= -golang.org/x/exp v0.0.0-20240707233637-46b078467d37 h1:uLDX+AfeFCct3a2C7uIWBKMJIR3CJMhcgfrUAqjRK6w= -golang.org/x/exp v0.0.0-20240707233637-46b078467d37/go.mod h1:M4RDyNAINzryxdtnbRXRL/OHtkFuWGRjvuhBJpk2IlY= +golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 h1:2dVuKD2vS7b0QIHQbpyTISPd0LeHDbnYEryqj5Q1ug8= +golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56/go.mod h1:M4RDyNAINzryxdtnbRXRL/OHtkFuWGRjvuhBJpk2IlY= golang.org/x/net v0.27.0 h1:5K3Njcw06/l2y9vpGCSdcxWOYHOUk3dVNGDXN+FvAys= golang.org/x/net v0.27.0/go.mod h1:dDi0PyhWNoiUOrAS8uXv/vnScO4wnHQO4mj9fn/RytE= golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=