Make the token type case insensitive

See https://tools.ietf.org/html/rfc6749#section-5.1 Fixes #411
lexik · Nov 9, 2017 · 0a4db16 · 0a4db16
1 parent 46e99e3
commit 0a4db16
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/Tests/TokenExtractor/AuthorizationHeaderTokenExtractorTest.php b/Tests/TokenExtractor/AuthorizationHeaderTokenExtractorTest.php
@@ -34,4 +34,13 @@ public function testGetTokenRequest()
         $request->headers->set('Authorization', 'Bearer testtoken');
         $this->assertEquals('testtoken', $extractor->extract($request));
     }
+
+    public function testTokenTypeIsCaseInsensitive()
+    {
+        $extractor = new AuthorizationHeaderTokenExtractor('MyToKeNTypE', 'Authorization');
+
+        $request = new Request();
+        $request->headers->set('Authorization', 'MyTokenType testtoken');
+        $this->assertEquals('testtoken', $extractor->extract($request));
+    }
 }
diff --git a/TokenExtractor/AuthorizationHeaderTokenExtractor.php b/TokenExtractor/AuthorizationHeaderTokenExtractor.php
@@ -48,7 +48,7 @@ public function extract(Request $request)
 
         $headerParts = explode(' ', $authorizationHeader);
 
-        if (!(2 === count($headerParts) && $headerParts[0] === $this->prefix)) {
+        if (!(2 === count($headerParts) && 0 === strcasecmp($headerParts[0], $this->prefix))) {
             return false;
         }