jwt/request/oauth2.go

package request

import (
	"strings"
)

// Extract bearer token from Authorization header
// Uses PostExtractionFilter to strip "Bearer " prefix from header
var AuthorizationHeaderExtractor = &PostExtractionFilter{
	HeaderExtractor{"Authorization"},
	func(tok string) (string, error) {
		// Should be a bearer token
		if len(tok) > 6 && strings.ToUpper(tok[0:7]) == "BEARER " {
			return tok[7:], nil
		}
		return tok, nil
	},
}

// Extractor for OAuth2 access tokens.  Looks in 'Authorization'
// header then 'access_token' argument for a token.
var OAuth2Extractor = &MultiExtractor{
	// Look for authorization token first
	AuthorizationHeaderExtractor,
	// Extract access_token from form or GET argument
	&ArgumentExtractor{"access_token"},
}