HTTP_AUTHORIZATION vs Authorization

mlibrary · May 3, 2024 · 9a4383b · 9a4383b
1 parent 12dd899
commit 9a4383b
Showing 1 changed file with 16 additions and 9 deletions.
diff --git a/lauth/app/actions/authorize.rb b/lauth/app/actions/authorize.rb
@@ -4,17 +4,24 @@ class Authorize < Lauth::Action
       def handle(request, response)
         response.format = :json
 
-        if request.has_header?("HTTP_AUTHORIZATION") && request.get_header("HTTP_AUTHORIZATION") == "Bearer " + App.app["settings"].bearer_token
-          result = Lauth::Ops::Authorize.new(
-            request: Lauth::Access::Request.new(
-              user: request.params[:user],
-              uri: request.params[:uri],
-              client_ip: request.params[:ip]
-            )
-          ).call
+        if request.has_header?("Authorization") 
+          if request.get_header("Authorization") == "Bearer " + App.app["settings"].bearer_token
+            result = Lauth::Ops::Authorize.new(
+              request: Lauth::Access::Request.new(
+                user: request.params[:user],
+                uri: request.params[:uri],
+                client_ip: request.params[:ip]
+              )
+            ).call
 
-          response.body = result.to_h.to_json
+           response.body = result.to_h.to_json
+          else
+            App.app["logger"].error("Request HTTP authorization failed.") 
+            response.status = 401 # Unauthorized
+            response.body = Lauth::Access::Request.new.to_h.to_json       
+          end
         else
+          App.app["logger"].error("Request missing HTTP authorization header.")
           response.status = 401 # Unauthorized
           response.body = Lauth::Access::Request.new.to_h.to_json
         end