OIDC misinterprets "Authorization: Basic" as Bearer

**Describe the bug**

An "Authorization: Basic ..." header is misinterpreted as "Authorization: Bearer ..." in: https://github.com/oauthlib/oauthlib/blob/2b8a44855a51ad5a5b0c348a08c2564a2e197ea2/oauthlib/openid/connect/core/tokens.py#L37-L44

This is handled correctly (by checking for the type) in: https://github.com/oauthlib/oauthlib/blob/2b8a44855a51ad5a5b0c348a08c2564a2e197ea2/oauthlib/oauth2/rfc6749/tokens.py#L249-L254

**How to reproduce**

See https://github.com/jazzband/django-oauth-toolkit/issues/964

**Expected behavior**

`token == None` should be returned.

**Additional context**

Please provide any further context here.

- Are you using OAuth1, OAuth2 or OIDC? **OIDC**
- Are you writing client or server side code? **Server side**
- If client, what provider are you connecting to? **N/A**
- Are you using a downstream library, such as `requests-oauthlib`, `django-oauth-toolkit`, ...? **django-oauth-toolkit**


	def validate_request(self, request):
	token = None
	if 'Authorization' in request.headers:
	token = request.headers.get('Authorization')[7:]
	else:
	token = request.access_token
	return self.request_validator.validate_jwt_bearer_token(
	token, request.scopes, request)

	if 'Authorization' in request.headers:
	split_header = request.headers.get('Authorization').split()
	if len(split_header) == 2 and split_header[0].lower() == 'bearer':
	token = split_header[1]
	else:
	token = request.access_token

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

OIDC misinterprets "Authorization: Basic" as Bearer #759

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Uh oh!

OIDC misinterprets "Authorization: Basic" as Bearer #759

Description

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions