From dcd10d0afd967358fb2e0c738cac618f73bd95f2 Mon Sep 17 00:00:00 2001
From: Pratyush-Panda-2006 <pandapratyush221@gmail.com>
Date: Wed, 8 Jul 2026 22:33:35 +0530
Subject: [PATCH] fix(backend): add support for Authorization Bearer header to
 authMiddleware (fix #126)

---
 backend/src/middleware/authMiddleware.js | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/backend/src/middleware/authMiddleware.js b/backend/src/middleware/authMiddleware.js
index 7ded482..f3e798c 100644
--- a/backend/src/middleware/authMiddleware.js
+++ b/backend/src/middleware/authMiddleware.js
@@ -2,7 +2,11 @@ import jwt from "jsonwebtoken";
 
 export const authenticateUser = async (req, res, next) => {
   try {
-    const token = req.cookies?.token;
+    let token = req.cookies?.token;
+
+    if (!token && req.headers.authorization?.startsWith("Bearer ")) {
+      token = req.headers.authorization.split(" ")[1];
+    }
 
     if (!token) {
       return res.status(401).json({