BEARER_FLAG

martin1847 · Sep 13, 2023 · 5fa19d8 · 5fa19d8
1 parent 8d266bb
commit 5fa19d8
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/rpc-server/src/main/java/com/bt/rpc/server/jws/CredentialVerify.java b/rpc-server/src/main/java/com/bt/rpc/server/jws/CredentialVerify.java
@@ -29,11 +29,15 @@ public interface CredentialVerify {
     Key<String> AUTHORIZATION = Metadata.Key.of(HttpConst.AUTHORIZATION_HEADER, Metadata.ASCII_STRING_MARSHALLER);
 
 
+    int TOKEN_INDEX = BEARER_FLAG.length() + 1;
+
     static String bearerToken(Metadata headers) {
         var tokenPlace = headers.get(AUTHORIZATION);
         String token = null;
-        if (null != tokenPlace && tokenPlace.startsWith(BEARER_FLAG)) {
-            token = tokenPlace.substring(BEARER_FLAG.length() + 1);
+        if (null != tokenPlace
+                && tokenPlace.length() > TOKEN_INDEX
+                && tokenPlace.startsWith(BEARER_FLAG)) {
+            token = tokenPlace.substring(TOKEN_INDEX);
         }
         return token;
     }