fix: only set authorization header when token is string (#950)

Author: JoaoPedroAS51

src/core/auth.ts

@@ -342,7 +342,12 @@ export class Auth {
     if (!_endpoint.headers) {
       _endpoint.headers = {}
     }
-    if (!_endpoint.headers[tokenName] && isSet(token) && token) {
+    if (
+      !_endpoint.headers[tokenName] &&
+      isSet(token) &&
+      token &&
+      typeof token === 'string'
+    ) {
       _endpoint.headers[tokenName] = token
     }
 

src/inc/request-handler.ts

@@ -16,10 +16,10 @@ export class RequestHandler {
     this.interceptor = null
   }
 
-  setHeader(token: string | boolean): void {
+  setHeader(token: string): void {
     if (this.scheme.options.token.global) {
       // Set Authorization token for all axios requests
-      this.axios.setHeader(this.scheme.options.token.name, token + '')
+      this.axios.setHeader(this.scheme.options.token.name, token)
     }
   }
 
@@ -115,7 +115,10 @@ export class RequestHandler {
   // Refresh tokens if token has expired
 
   private _getUpdatedRequestConfig(config, token: string | boolean) {
-    config.headers[this.scheme.options.token.name] = token
+    if (typeof token === 'string') {
+      config.headers[this.scheme.options.token.name] = token
+    }
+
     return config
   }
 

src/inc/token.ts

@@ -24,16 +24,22 @@ export class Token {
     const token = addTokenPrefix(tokenValue, this.scheme.options.token.type)
 
     this._setToken(token)
-    this.scheme.requestHandler.setHeader(token)
     this._updateExpiration(token)
 
+    if (typeof token === 'string') {
+      this.scheme.requestHandler.setHeader(token)
+    }
+
     return token
   }
 
   sync(): string | boolean {
     const token = this._syncToken()
     this._syncExpiration()
-    this.scheme.requestHandler.setHeader(token)
+
+    if (typeof token === 'string') {
+      this.scheme.requestHandler.setHeader(token)
+    }
 
     return token
   }

src/utils/index.ts

@@ -158,7 +158,12 @@ export function addTokenPrefix(
   token: string | boolean,
   tokenType: string | false
 ): string | boolean {
-  if (!token || !tokenType || (token + '').startsWith(tokenType)) {
+  if (
+    !token ||
+    !tokenType ||
+    typeof token !== 'string' ||
+    token.startsWith(tokenType)
+  ) {
     return token
   }
 
@@ -169,11 +174,11 @@ export function removeTokenPrefix(
   token: string | boolean,
   tokenType: string | false
 ): string | boolean {
-  if (!token || !tokenType) {
+  if (!token || !tokenType || typeof token !== 'string') {
     return token
   }
 
-  return (token + '').replace(tokenType + ' ', '')
+  return token.replace(tokenType + ' ', '')
 }
 
 export function urlJoin(...args: string[]): string {