dropwizard / dropwizard / 2485

86%

push

travis-ci

Support access_token query parameter for OAuth (#1593)

The OAuth Bearer token spec allows to pass the access token not
only in the Authorization header with the Bearer prefix, but
also as an access_token query parameter.

See https://tools.ietf.org/html/rfc6750#section-2.3

While it's preferred to use the header for increased security, the
token can be helpful at times.

 - biggest advantage is you can avoid CORS pre-flight requests with the
   query parameter since they are not triggered when no non-simple header
   is present
 - it can be useful when testing/developing where you can simulate requests
   in a browser tab without a REST client

3 of 3 new or added lines in 1 file covered. (100.0%)

5414 of 6647 relevant lines covered (81.45%)

53.14 hits per line