You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on May 31, 2022. It is now read-only.
Clients SHOULD make authenticated requests with a bearer token using
the "Authorization" request header field with the "Bearer" HTTP
authorization scheme.
Unfortunately, DefaultOAuth2AccessToken lowercases the Bearer authorization scheme ( BEARER_TYPE.toLowerCase())
This causes the OAuth2RestTemplate to insert an authorization header with lowercase bearer authorization scheme. Some server implementations fail on the lowercase bearer authorization scheme
The text was updated successfully, but these errors were encountered:
If the server sends "Bearer" in it's access token response then Spring OAuth will honour that I believe. This seems like a duplicate of #457 in any case.
As https://tools.ietf.org/html/rfc6750#section-2.1 states,
Clients SHOULD make authenticated requests with a bearer token using
the "Authorization" request header field with the "Bearer" HTTP
authorization scheme.
Unfortunately, DefaultOAuth2AccessToken lowercases the Bearer authorization scheme ( BEARER_TYPE.toLowerCase())
This causes the OAuth2RestTemplate to insert an authorization header with lowercase bearer authorization scheme. Some server implementations fail on the lowercase bearer authorization scheme
The text was updated successfully, but these errors were encountered: