bsw/jbe@1309: function util.get_access_token()
bsw/jbe@1309:     
bsw/jbe@1309:   local access_token_header = request.get_header("Authorization")
bsw/jbe@1309:   if access_token_header then
bsw/jbe@1309:     access_token_header = string.match(access_token_header, "^Bearer ([^ ,]*)$")
bsw/jbe@1309:   end
bsw/jbe@1309: 
bsw/jbe@1309:   local access_token_param = param.get("access_token")
bsw/jbe@1309: 
bsw/jbe@1309:   if access_token_header and access_token_param then
bsw/jbe@1309:     return nil, "header_and_param"
bsw/jbe@1309:   end
bsw/jbe@1309:   
bsw/jbe@1309:   return(access_token_header or access_token_param)
bsw/jbe@1309: 
bsw/jbe@1309: end