fix: trim and validate bearer token

- trim and validate the bearer token properly

Signed-off-by: slimm609 <[email protected]>

internal/request/http.go

@@ -114,6 +114,10 @@ func (h http) processBearerToken() (username string, groups []string, err error)
 		return "", nil, fmt.Errorf("cannot create TokenReview")
 	}
 
+	if !tr.Status.Authenticated {
+		return "", nil, fmt.Errorf("cannot verify the token due to error")
+	}
+
 	if statusErr := tr.Status.Error; len(statusErr) > 0 {
 		return "", nil, fmt.Errorf("cannot verify the token due to error")
 	}
@@ -122,7 +126,7 @@ func (h http) processBearerToken() (username string, groups []string, err error)
 }
 
 func (h http) bearerToken() string {
-	return strings.ReplaceAll(h.Header.Get("Authorization"), "Bearer ", "")
+	return strings.TrimSpace(strings.ReplaceAll(h.Header.Get("Authorization"), "Bearer ", ""))
 }
 
 type authenticationFn func() (username string, groups []string, err error)