fix: panic when missing token

CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## Unreleased
 
+## 0.3.1 - (2023-1-14)
+
+### Fixed
+
+- fix: panicking when a bearer token is missing in protected request (be6bf9fb)
+
 ## 0.3.0 - (2023-1-13)
 
 ### Added 

jwt-authorizer/src/layer.rs

@@ -129,19 +129,28 @@ where
     fn authorize(&self, mut request: Request<B>) -> Self::Future {
         let authorizer = self.auth.clone();
         let h = request.headers();
-        let bearer: Authorization<Bearer> = h.typed_get().unwrap();
+        let bearer_o: Option<Authorization<Bearer>> = h.typed_get();
         Box::pin(async move {
-            if let Ok(token_data) = authorizer.check_auth(bearer.token()).await {
+            if let Some(bearer) = bearer_o {
-                // Set `token_data` as a request extension so it can be accessed by other
+                if let Ok(token_data) = authorizer.check_auth(bearer.token()).await {
-                // services down the stack.
+                    // Set `token_data` as a request extension so it can be accessed by other
-                request.extensions_mut().insert(token_data);
+                    // services down the stack.
-
+                    request.extensions_mut().insert(token_data);
-                Ok(request)
+    
+                    Ok(request)
+                } else {
+                    let unauthorized_response = Response::builder()
+                        .status(StatusCode::UNAUTHORIZED)
+                        .body(Body::empty()) // TODO: add error code (https://datatracker.ietf.org/doc/html/rfc6750#section-3.1)
+                        .unwrap();
+    
+                    Err(unauthorized_response)
+                }
             } else {
                 let unauthorized_response = Response::builder()
-                    .status(StatusCode::UNAUTHORIZED)
+                .status(StatusCode::UNAUTHORIZED)
-                    .body(Body::empty())
+                .body(Body::empty()) // TODO: add error message (https://datatracker.ietf.org/doc/html/rfc6750#section-3.1)
-                    .unwrap();
+                .unwrap();
 
                 Err(unauthorized_response)
             }