Check for Authorization header prior to getting token bearer

Author: ilijastuden

src/Adapter/TokenBearer.php

@@ -47,6 +47,10 @@ public function __construct(UserRepositoryInterface $user_repository, TokenRepos
      */
     public function initialize(ServerRequestInterface $request)
     {
+        if (!$request->hasHeader('Authorization')) {
+            return null;
+        }
+
         $authorization = $request->getHeaderLine('Authorization');
 
         if (empty($authorization) || substr($authorization, 0, 7) !== 'Bearer ') {

src/Session/RepositoryInterface.php

@@ -55,7 +55,7 @@ public function recordUsageById($session_id);
     public function recordUsageBySession(SessionInterface $session);
 
     /**
-     * Issue a new token.
+     * Create a new session.
      *
      * @param  AuthenticatedUserInterface $user
      * @param  DateTimeInterface|null     $expires_at