fix: fixed bearer token header requirments from crashing

1 files changed, 7 insertions, 3 deletions

diff --git a/libs/VNLib.Plugins.Sessions.OAuth/src/OAuth2TokenFactory.cs b/libs/VNLib.Plugins.Sessions.OAuth/src/OAuth2TokenFactory.cs
index 6d055df..e3588ab 100644
--- a/libs/VNLib.Plugins.Sessions.OAuth/src/OAuth2TokenFactory.cs
+++ b/libs/VNLib.Plugins.Sessions.OAuth/src/OAuth2TokenFactory.cs
@@ -104,9 +104,13 @@ namespace VNLib.Plugins.Sessions.OAuth
             {
                 int bearerIndex = authorization.IndexOf(_config.TokenType, StringComparison.OrdinalIgnoreCase);
 
-                //Calc token offset, get token, and trim any whitespace
-                token = authorization.AsSpan(bearerIndex + _config.TokenType.Length).Trim().ToString();
-                return true;
+                //Check if the token type is present
+                if (bearerIndex >= 0)
+                {
+                    //Calc token offset, get token, and trim any whitespace
+                    token = authorization.AsSpan(bearerIndex + _config.TokenType.Length).Trim().ToString();
+                    return true;
+                }
             }
 
             token = null;