Fixed bug with reading access token from authorization header

[naasir]

This bug was preventing clients from specifying the access token in the HTTP authorization header (vs. specifying it as a query param).

[micahlmartin]

What exactly is the nature of the bug? I'm not sure I follow.

[naasir]

Hey Micah,

The IRequest.Headers property has type IDictionary<string, IList> (see IRequest:11).
So this call: _request.Headers.SafeGet(HeaderType.Authorization) returns an IList not a single string. When you then concatenate that with "" (which does an implicit conversion), you get a string that describes the type, instead of the value, which is what we're after.

As for replacing "" with string.empty, that was just a resharper suggestion.

[micahlmartin]

I see. That makes sense. However I think the call to First() should be FirstOrDefault() because if the list is empty it will throw an exception.

[naasir]

Ah, good call. Fixed.

[micahlmartin]

Nice job! Thanks for fixing!