Merge pull request #52 from matrix-org/hs/check-bearer-token

Support header token for appservice transactions

Author: Half-Shot

changelog.d/52.feature

@@ -0,0 +1 @@
+Support Authorization headers ([MSC2832](https://github.com/matrix-org/matrix-spec-proposals/pull/2832)).

src/app-service.ts

@@ -203,7 +203,7 @@ export class AppService extends EventEmitter {
     }
 
     private isInvalidToken(req: Request, res: Response): boolean {
-        const providedToken = req.query.access_token;
+        const providedToken = req.headers.authorization?.substring("Bearer ".length) ?? req.query.access_token;
         if (providedToken !== this.config.homeserverToken) {
             res.status(403);
             res.send({