diff --git a/node/jwt_handler.go b/node/jwt_handler.go index 637ae19686..4f85c12367 100644 --- a/node/jwt_handler.go +++ b/node/jwt_handler.go @@ -47,7 +47,7 @@ func (handler *jwtHandler) ServeHTTP(out http.ResponseWriter, r *http.Request) { strToken string claims jwt.RegisteredClaims ) - if auth := r.Header.Get("Authorization"); strings.HasPrefix(auth, "Bearer ") { + if auth := r.Header.Get("Authorization"); len(auth) >= 7 && strings.EqualFold(auth[:7], "bearer ") { strToken = strings.TrimPrefix(auth, "Bearer ") } if len(strToken) == 0 {