Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WIP: Don't assume it's a Bearer token in Authorization header #965

Closed
wants to merge 1 commit into from

Conversation

n2ygk
Copy link
Member

@n2ygk n2ygk commented Apr 19, 2021

Fixes #964

Description of the Change

Make sure the Authorization header contains a Bearer token; a Basic token causes the OIDC jwt parser to blow up.

Checklist

  • PR only contains one change (considered splitting up PR)
  • unit-test added
  • documentation updated
  • CHANGELOG.md updated (only for user relevant changes)
  • author name in AUTHORS

@n2ygk n2ygk marked this pull request as draft April 19, 2021 17:23
@n2ygk
Copy link
Member Author

n2ygk commented May 26, 2021

submitted upstream instead oauthlib/oauthlib#760

@n2ygk n2ygk closed this May 26, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

OIDC: misinterprets Basic Auth as Bearer: 500 error
1 participant