Get Authorization from headers before reading from cookies

Author: ArtyomVancyan

src/fastapi_oauth2/middleware.py

@@ -85,7 +85,10 @@ def __init__(self, config: OAuth2Config) -> None:
             Auth.register_client(client)
 
     async def authenticate(self, request: Request) -> Optional[Tuple["Auth", "User"]]:
-        authorization = request.cookies.get("Authorization")
+        authorization = request.headers.get(
+            "Authorization",
+            request.cookies.get("Authorization"),
+        )
         scheme, param = get_authorization_scheme_param(authorization)
 
         if not scheme or not param: