Skip to content
This repository has been archived by the owner on Apr 11, 2023. It is now read-only.

Accept plain OAuth2 Bearer Tokens, not base64-encoded #87

Open
llorllale opened this issue Dec 8, 2020 · 0 comments
Open

Accept plain OAuth2 Bearer Tokens, not base64-encoded #87

llorllale opened this issue Dec 8, 2020 · 0 comments

Comments

@llorllale
Copy link
Contributor

I still believe that RFC6750 mandates the base64-encoding of the access_token in the Authorization header but after further research into it I've realized that many if not all vendors process the token in plain form (more precisely, in the same format, byte-for-byte, as was delivered in the access token response (RFC6749 section 4.1.4)).

Client components impacted by this change are:

https://github.com/trustbloc/hub-auth/blob/413a3517d5d5a373780c7f55d7f866456db5a31a/pkg/restapi/operation/operations.go#L806-L833

@llorllale llorllale added this to the 0.1.6 milestone Dec 8, 2020
@llorllale llorllale self-assigned this Dec 8, 2020
@rolsonquadras rolsonquadras modified the milestones: 0.1.6, 0.1.8 Sep 22, 2021
@rolsonquadras rolsonquadras removed this from the 0.1.8 milestone Apr 29, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants