handle maformed auth header more gracefully

bcgov · Nov 27, 2023 · e83ad5c · e83ad5c
1 parent 882996c
commit e83ad5c
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/api/src/utils/auth-utils.ts b/api/src/utils/auth-utils.ts
@@ -81,15 +81,15 @@ export const authenticate = async (req: InvasivesRequest) => {
 
   MDC.additionalContext.isPublicURL = isPublicURL;
 
-  let token;
+  let token: string;
 
   try {
     token = authHeader.split(/\s/)[1];
   } catch (error) {
     defaultLog.info({ label: 'authenticate', message: 'malformed auth token received' });
 
     throw {
-      code: 401,
+      code: 400,
       message: 'Authorization header parse failure',
       namespace: 'auth-utils'
     };