Fixed bearer verification

GeoNode · Jan 31, 2020 · a17a15a · a17a15a
1 parent 81d6501
commit a17a15a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/oauth2_provider/oauth2_backends.py b/oauth2_provider/oauth2_backends.py
@@ -168,7 +168,7 @@ def verify_request(self, request, scopes):
         """
         uri, http_method, body, headers = self._extract_params(request)
 
-        if ('Authorization' in headers and headers.get('Authorization') == 'Bearer') or getattr(request, 'access_token', None):
+        if ('Authorization' in headers and headers.get('Authorization').startswith('Bearer')) or getattr(request, 'access_token', None):
             valid, r = self.server.verify_request(uri, http_method, body, headers, scopes=scopes)
             return valid, r
         else: