fix: pick only Bearer in OpenId security

GiovanniCardamone · May 12, 2022 · d2f1109 · d2f1109
1 parent 0be1851
commit d2f1109
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/index.ts b/src/index.ts
@@ -366,7 +366,9 @@ function getOpenIdConnectSecurityData(
 	security: OpenIdConnectAuth,
 	request: FastifyRequest
 ) {
-	return request.headers.authorization
+	return request.headers.authorization?.startsWith('Bearer ')
+		? request.headers.authorization
+		: undefined
 }
 
 export * from './types'