fix plugins/oauth2

Kong · Jan 13, 2024 · a932133 · a932133
1 parent 790f2bd
commit a932133
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/kong/plugins/oauth2/access.lua b/kong/plugins/oauth2/access.lua
@@ -844,6 +844,11 @@ local function parse_access_token(conf)
 
   local access_token = kong.request.get_header(conf.auth_header_name)
   if access_token then
+    local p = access_token:find(",", 1, true)
+    if p then
+      access_token = access_token:sub(1, p - 1)
+    end
+
     local parts = {}
     for v in access_token:gmatch("%S+") do -- Split by space
       table.insert(parts, v)