Handle empty or null authorization header prefix

lexik · Mar 2, 2017 · d2d3fc3 · d2d3fc3
1 parent 6366ca5
commit d2d3fc3
Showing 1 changed file with 9 additions and 3 deletions.
diff --git a/TokenExtractor/AuthorizationHeaderTokenExtractor.php b/TokenExtractor/AuthorizationHeaderTokenExtractor.php
@@ -22,8 +22,8 @@ class AuthorizationHeaderTokenExtractor implements TokenExtractorInterface
     protected $name;
 
     /**
-     * @param string $prefix
-     * @param string $name
+     * @param string|null $prefix
+     * @param string      $name
      */
     public function __construct($prefix, $name)
     {
@@ -42,7 +42,13 @@ public function extract(Request $request)
             return false;
         }
 
-        $headerParts = explode(' ', $request->headers->get($this->name));
+        $authorizationHeader = $request->headers->get($this->name);
+
+        if (empty($this->prefix)) {
+            return $authorizationHeader;
+        }
+
+        $headerParts = explode(' ', $authorizationHeader);
 
         if (!(count($headerParts) === 2 && $headerParts[0] === $this->prefix)) {
             return false;