Closed fitzyjoe closed 6 years ago
If an Authorization header exists, it must be equal to the JWT after a prefix of "Bearer " or the usual redirect is returned. There is an additional test for this new feature.
@craigpell I actually stole that method, and its comments from here. Probably written by Russians! I will correct the comments.
https://www.nginx.com/resources/wiki/start/topics/examples/headers_management/?highlight=http%20settings
I cleaned up the tests @kevinmichaelchen
If an Authorization header exists, it must be equal to the JWT after a prefix of "Bearer " or the usual redirect is returned. There is an additional test for this new feature.