authorization header in /oauth2/token endpoint is case sensitive

[ducky427]

As noted in RFC2616, HTTP headers are supposed to be case-insensitive.

I've noticed that when getting a token from the /oauth2/token endpoint, the authorization header needs to be capitalised and not lower case. This is not standard HTTP behaviour.

[aeneasr]

Hm, that is quite unlikely because we're not using anything custom-made, only regular Go-libraries which are RFC conform. Could you show a reproducible test case?

[ducky427]

My bad. I can't seem to produce this.

Thanks!