Skip to content

Commit c1dccf8

Browse files
committedJul 24, 2017
Merge branch 'pr-118-case-insensitive-auth-scheme'
Make comparison of scheme in auth header case-insensitive Closes #118
2 parents 2eba070 + d127fd8 commit c1dccf8

File tree

2 files changed

+11
-1
lines changed

2 files changed

+11
-1
lines changed
 

‎lib/extract_jwt.js

+2-1
Original file line numberDiff line numberDiff line change
@@ -50,12 +50,13 @@ extractors.fromUrlQueryParameter = function (param_name) {
5050

5151

5252
extractors.fromAuthHeaderWithScheme = function (auth_scheme) {
53+
var auth_scheme_lower = auth_scheme.toLowerCase();
5354
return function (request) {
5455

5556
var token = null;
5657
if (request.headers[AUTH_HEADER]) {
5758
var auth_params = auth_hdr.parse(request.headers[AUTH_HEADER]);
58-
if (auth_params && auth_scheme === auth_params.scheme) {
59+
if (auth_params && auth_scheme_lower === auth_params.scheme.toLowerCase()) {
5960
token = auth_params.value;
6061
}
6162
}

‎test/extrators-test.js

+9
Original file line numberDiff line numberDiff line change
@@ -130,6 +130,15 @@ describe('Token extractor', function() {
130130
expect(token).to.equal('abcd123');
131131
});
132132

133+
134+
it('should perform a case-insensivite string comparison', function () {
135+
var req = new Request()
136+
req.headers['authorization'] = 'test_scheme abcd123';
137+
138+
var token = extractor(req);
139+
140+
expect(token).to.equal('abcd123');
141+
});
133142
});
134143

135144

0 commit comments

Comments
 (0)
Please sign in to comment.