Skip to content

Accept API Token in Authorization Header #90

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
winder merged 6 commits into from
Jun 26, 2019
Merged

Accept API Token in Authorization Header #90

Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
2cd00aa
Fix copy/paste error in promote_stable script.
winder Jun 18, 2019
f5a8a45
Merge remote-tracking branch 'upstream/master'
winder Jun 21, 2019
c192c71
Merge remote-tracking branch 'upstream/master'
winder Jun 25, 2019
5c430ac
Accept API tokens provided in a bearer token format.
winder Jun 25, 2019
36c1991
Be more explicit about checking the auth type.
winder Jun 26, 2019
1c1b3e1
Use the array.
winder Jun 26, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions daemon/algod/api/server/lib/middlewares/auth.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -74,6 +74,13 @@ func Auth(log logging.Logger, apiToken string) func(http.Handler) http.Handler {
// Handle debug route
// Grab the apiToken from the HTTP header
providedToken := []byte(r.Header.Get(TokenHeader))
if len(providedToken) == 0 {
// Accept tokens provided in a bearer token format.
authentication := strings.SplitN(r.Header.Get("Authorization"), " ", 2)
if len(authentication) == 2 && strings.EqualFold("Bearer", authentication[0]) {
providedToken = []byte(authentication[1])
}
}
if route.GetName() == debugRouteName {
// For debug routes, we place the apiToken in the path itself
providedToken = []byte(mux.Vars(r)["apiToken"])
Expand Down