Restrict jwt verifier to Bearer type

pydio · Feb 16, 2022 · e1fe56f · e1fe56f
1 parent 24c94c3
commit e1fe56f
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/common/service/jwt.go b/common/service/jwt.go
@@ -80,6 +80,10 @@ func JWTHttpWrapper(h http.Handler) http.Handler {
 		if val, ok1 := r.Header["Authorization"]; ok1 {
 
 			whole := strings.Join(val, "")
+			if !strings.HasPrefix(whole, "Bearer ") {
+				h.ServeHTTP(w, r)
+				return
+			}
 			rawIDToken := strings.TrimPrefix(strings.Trim(whole, ""), "Bearer ")
 			//var claims claim.Claims
 			var err error