From b42f8a620b5ce8ce20aae6e8b6f37c22d365ed36 Mon Sep 17 00:00:00 2001 From: Oliver Date: Mon, 29 Jan 2024 15:58:56 +1100 Subject: [PATCH] Token tweaks (#6354) - Adjust to allow "bearer" token type --- InvenTree/InvenTree/middleware.py | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/InvenTree/InvenTree/middleware.py b/InvenTree/InvenTree/middleware.py index 86b254ac46..1a25202f23 100644 --- a/InvenTree/InvenTree/middleware.py +++ b/InvenTree/InvenTree/middleware.py @@ -21,6 +21,7 @@ logger = logging.getLogger('inventree') def get_token_from_request(request): """Extract token information from a request object.""" auth_keys = ['Authorization', 'authorization'] + token_keys = ['token', 'bearer'] token = None @@ -28,9 +29,10 @@ def get_token_from_request(request): if auth_header := request.headers.get(k, None): auth_header = auth_header.strip().lower().split() - if len(auth_header) > 1 and auth_header[0].startswith('token'): - token = auth_header[1] - break + if len(auth_header) > 1: + if auth_header[0].strip().lower().replace(':', '') in token_keys: + token = auth_header[1] + break return token