fix(matrix): get as_token from headers (#151)

satorijs · Sep 8, 2023 · 8f9d54a · 8f9d54a
1 parent a459c48
commit 8f9d54a
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/adapters/matrix/src/http.ts b/adapters/matrix/src/http.ts
@@ -14,7 +14,10 @@ export class HttpAdapter extends Adapter.Server<MatrixBot> {
     ctx.router.all('/(.*)', (koaCtx, next) => {
       const match = this.bots.filter(bot => koaCtx.path.startsWith(bot.config.path + '/'))
       if (match.length === 0) return next()
-      const bots = match.filter(bot => bot.config.hsToken === koaCtx.query.access_token)
+      //                                            Bearer
+      const asToken = koaCtx.headers.authorization?.substring(7) || koaCtx.query.access_token
+      if (!asToken) return next()
+      const bots = match.filter(bot => bot.config.hsToken === asToken)
       if (!bots.length) {
         koaCtx.status = 403
         koaCtx.body = { errcode: 'M_FORBIDDEN' }