Merge pull request #341 from jason-fox/jason-fox-patch-1

Fix #340 - only bar access_token as header
ging · Oct 9, 2023 · 306c988 · 306c988
2 parents a258dcd + 1bd498f
commit 306c988
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/controllers/oauth2/oauth2.js b/controllers/oauth2/oauth2.js
@@ -470,7 +470,7 @@ exports.authenticate_token = function (req, res) {
     access_token: req.query.access_token || header_access_token
   };
 
-  if (options.authzforce && (options.action || options.resource || options.service_header || options.access_token)) {
+  if (options.authzforce && (options.action || options.resource || options.service_header || header_access_token )) {
     const error = {
       message: 'Cannot handle 2 authentications levels at the same time',
       code: 400,