mech-oauth2: Fix gs2-header parsing

diff --git a/src/auth/mech-oauth2.c b/src/auth/mech-oauth2.c
index 03477d9d9b5ae804a557b80653b15a9c54b6be71..65a4c8629d215dc53d2c38b8be28e3d87fb35c6b 100644 (file)
--- a/src/auth/mech-oauth2.c
+++ b/src/auth/mech-oauth2.c
@@ -178,7 +178,7 @@ mech_oauthbearer_auth_continue(struct auth_request *request,
        }
 
        /* the first field is specified by RFC5801 as gs2-header */
-       for(ptr = t_strsplit(fields[0], ","); *ptr != NULL; ptr++) {
+       for(ptr = t_strsplit_spaces(fields[0], ","); *ptr != NULL; ptr++) {
                switch(*ptr[0]) {
                case 'f':
                        auth_request_log_info(request, AUTH_SUBSYS_MECH,
@@ -207,6 +207,7 @@ mech_oauthbearer_auth_continue(struct auth_request *request,
                                                      "%s", error);
                                
                        }
+                       break;
                default:
                        auth_request_log_info(request, AUTH_SUBSYS_MECH,
                                              "Invalid gs2-header in request");