Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[All] Correcting Bearer Authorization header #698

Merged
merged 2 commits into from
Nov 21, 2023

Conversation

yaleman
Copy link
Contributor

@yaleman yaleman commented Nov 19, 2023

Currently the value for the "Authorization" header is taken from the case-insensitive "token_type" field (RFC 6750) sent by the OAuth IDP. This PR corrects for this and matches the RFC 6749 requirement of having title-cased "Bearer".

References: #677 and #676

Copy link

welcome bot commented Nov 19, 2023

Thanks for submitting your first pull request! You are awesome! 🤗

If you haven't done so already, check out Jupyter's Code of Conduct.
welcome
You can meet the other Jovyans by joining our Discourse forum. There is also a intro thread there where you can stop by and say Hi! 👋

Welcome to the Jupyter community! 🎉

Copy link
Member

@manics manics left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Other than the comment this seems reasonable.
@GeorgianaElena what do you think?

oauthenticator/oauth2.py Outdated Show resolved Hide resolved
@manics manics linked an issue Nov 20, 2023 that may be closed by this pull request
Copy link
Member

@GeorgianaElena GeorgianaElena left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks good to me! Thanks @yaleman and @manics 🚀

@GeorgianaElena GeorgianaElena merged commit 0a06daf into jupyterhub:main Nov 21, 2023
6 checks passed
Copy link

welcome bot commented Nov 21, 2023

Congrats on your first merged pull request in this project! 🎉
congrats
Thank you for contributing, we are very proud of you! ❤️

@consideRatio
Copy link
Member

Thank you @yaleman and thank you @jyio for the amazing resaerch in #677 (comment) - wow!! ❤️ 🎉 🌻

@yaleman yaleman deleted the oauth2-bearer branch November 22, 2023 01:01
@consideRatio consideRatio changed the title Correcting Bearer Authorization header in OAuth2 [All] Correcting Bearer Authorization header Nov 22, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Bitbucket auth broken
4 participants