# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1611768384 -3600
# Node ID 1ecda954fe97d4114a1ad57d42576370b4bc8f64
# Parent  76fc73d390921574fd5641eb3089e0cebb2ee3aa
mod_http_file_share: Strip authorization type prefix a bit earlier

diff -r 76fc73d39092 -r 1ecda954fe97 plugins/mod_http_file_share.lua
--- a/plugins/mod_http_file_share.lua	Wed Jan 27 18:13:15 2021 +0100
+++ b/plugins/mod_http_file_share.lua	Wed Jan 27 18:26:24 2021 +0100
@@ -152,11 +152,14 @@
 function handle_upload(event, path) -- PUT /upload/:slot
 	local request = event.request;
 	local authz = request.headers.authorization;
-	if not authz or not authz:find"^Bearer ." then
+	if authz then
+		authz = authz:match("^Bearer (.*)")
+	end
+	if not authz then
 		module:log("debug", "Missing Authorization");
 		return 403;
 	end
-	local authed, upload_info = jwt.verify(secret, authz:match("^Bearer (.*)"));
+	local authed, upload_info = jwt.verify(secret, authz);
 	if not (authed and type(upload_info) == "table" and type(upload_info.exp) == "number") then
 		module:log("debug", "Unauthorized or invalid token: %s, %q", authed, upload_info);
 		return 401;