From 57d725bab6fc935126d43f22be91a71af57e0e76 Mon Sep 17 00:00:00 2001 From: steve-chavez Date: Mon, 26 Jul 2021 01:44:34 -0500 Subject: [PATCH] Add Bearer without capitalization --- auth.rst | 4 ++++ releases/upcoming.rst | 3 +++ 2 files changed, 7 insertions(+) diff --git a/auth.rst b/auth.rst index 3d0c915bf..d00f67368 100644 --- a/auth.rst +++ b/auth.rst @@ -143,6 +143,8 @@ In the function you can run arbitrary code to check the request and raise an exc END $$ LANGUAGE plpgsql; +.. _client_auth: + Client Auth =========== @@ -153,6 +155,8 @@ To make an authenticated request the client must include an :code:`Authorization GET /foo HTTP/1.1 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJyb2xlIjoiamRvZSIsImV4cCI6MTQ3NTUxNjI1MH0.GYDZV3yM0gqvuEtJmfpplLBXSGYnke_Pvnl0tbKAjB4 +The ``Bearer`` header value can be used with or without capitalization(``bearer``). + JWT Generation -------------- diff --git a/releases/upcoming.rst b/releases/upcoming.rst index 3ab9d21c6..0c1ee72a6 100644 --- a/releases/upcoming.rst +++ b/releases/upcoming.rst @@ -34,6 +34,9 @@ Added * Allow :ref:`config_reloading` by sending a SIGUSR2 signal. |br| -- `@steve-chavez `_ +* Allow ``Bearer`` with and without capitalization as authentication schema. See :ref:`client_auth`. + |br| -- `@wolfgangwalther `_ + * Config options for showing a full OpenAPI output regardless of the JWT role privileges and for disabling it altogether. See :ref:`openapi-mode`. |br| -- `@steve-chavez `_