Skip to content

OIDC Authorization header uses incorrect Bearer token casing #205

@yaronshanisima

Description

@yaronshanisima

Description

The OIDCAuthHeaderValuePreprocessor class uses "BEARER " (all uppercase) instead of "Bearer " (proper case) when constructing the Authorization header.

Problem

According to RFC 6750, the OAuth 2.0 Bearer Token scheme should use Bearer with proper capitalization. The uppercase variant BEARER breaks compatibility with some OAuth2 proxies (such as oauth2-proxy) which return a 401 error when receiving the malformed header.

Location

src/main/java/com/getindata/connectors/http/internal/OIDCAuthHeaderValuePreprocessor.java line 48

Current behavior

return "BEARER " + auth.authenticate();

Expected behavior

return "Bearer " + auth.authenticate();

Fix

PR #203 addresses this issue.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions