fix introspection auth check

thisdot · Jul 15, 2024 · 5b87630 · 5b87630
1 parent aecd0ae
commit 5b87630
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/src/handlers/graphql.ts b/src/handlers/graphql.ts
@@ -48,9 +48,7 @@ export const server = startServerAndCreateLambdaHandler<MyContext>(apolloServer,
 			});
 		}
 
-		// removing the initial "Bearer "
-		const token = authorization.substring(7);
-		const isAuthorized = isTokenValid(token);
+		const isAuthorized = isTokenValid(authorization);
 		if (!isAuthorized) {
 			throw new GraphQLError('User is not authorized to access this resource', {
 				extensions: { code: 'FORBIDDEN', http: { status: 403 } },