symfony
diff --git a/‎src/Symfony/Component/Inflector/.github/PULL_REQUEST_TEMPLATE.md
Lines changed: 0 additions & 8 deletions b/‎src/Symfony/Component/Inflector/.github/PULL_REQUEST_TEMPLATE.md
Lines changed: 0 additions & 8 deletions
diff --git a/‎src/Symfony/Component/Inflector/.github/workflows/check-subtree-split.yml
Lines changed: 0 additions & 37 deletions b/‎src/Symfony/Component/Inflector/.github/workflows/check-subtree-split.yml
Lines changed: 0 additions & 37 deletions
diff --git a/‎src/Symfony/Component/Security/Http/AccessToken/HeaderAccessTokenExtractor.php
Lines changed: 1 addition & 1 deletion b/‎src/Symfony/Component/Security/Http/AccessToken/HeaderAccessTokenExtractor.php
Lines changed: 1 addition & 1 deletion
diff --git a/‎src/Symfony/Component/Security/Http/Tests/Authenticator/AccessTokenAuthenticatorTest.php
Lines changed: 28 additions & 0 deletions b/‎src/Symfony/Component/Security/Http/Tests/Authenticator/AccessTokenAuthenticatorTest.php
Lines changed: 28 additions & 0 deletions
@@ -29,7 +29,7 @@ public function __construct(
         private readonly string $tokenType = 'Bearer',
     ) {
         $this->regex = sprintf(
-            '/^%s([a-zA-Z0-9\-_\+~\/\.]+)$/',
+            '/^%s([a-zA-Z0-9\-_\+~\/\.]+=*)$/',
             '' === $this->tokenType ? '' : preg_quote($this->tokenType).'\s+'
         );
     }
 
@@ -18,6 +18,7 @@
 use Symfony\Component\Security\Core\User\InMemoryUserProvider;
 use Symfony\Component\Security\Http\AccessToken\AccessTokenExtractorInterface;
 use Symfony\Component\Security\Http\AccessToken\AccessTokenHandlerInterface;
+use Symfony\Component\Security\Http\AccessToken\HeaderAccessTokenExtractor;
 use Symfony\Component\Security\Http\Authenticator\AccessTokenAuthenticator;
 use Symfony\Component\Security\Http\Authenticator\FallbackUserLoader;
 use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
@@ -159,4 +160,31 @@ public function testAuthenticateWithFallbackUserLoader()
 
         $this->assertEquals('test', $passport->getUser()->getUserIdentifier());
     }
+
+    /**
+     * @dataProvider provideAccessTokenHeaderRegex
+     */
+    public function testAccessTokenHeaderRegex(string $input, ?string $expectedToken)
+    {
+        // Given
+        $extractor = new HeaderAccessTokenExtractor();
+        $request = Request::create('/test', 'GET', [], [], [], ['HTTP_AUTHORIZATION' => $input]);
+
+        // When
+        $token = $extractor->extractAccessToken($request);
+
+        // Then
+        $this->assertEquals($expectedToken, $token);
+    }
+
+    public function provideAccessTokenHeaderRegex(): array
+    {
+        return [
+            ['Bearer token', 'token'],
+            ['Bearer mF_9.B5f-4.1JqM', 'mF_9.B5f-4.1JqM'],
+            ['Bearer d3JvbmdfcmVnZXhwX2V4bWFwbGU=', 'd3JvbmdfcmVnZXhwX2V4bWFwbGU='],
+            ['Bearer Not Valid', null],
+            ['Bearer (NotOK123)', null],
+        ];
+    }
 }
Original file line number	Diff line number	Diff line change
`@@ -29,7 +29,7 @@ public function __construct(`
`29`	`29`	`private readonly string $tokenType = 'Bearer',`
`30`	`30`	`) {`
`31`	`31`	`$this->regex = sprintf(`
`32`		`- '/^%s([a-zA-Z0-9\-_\+~\/\.]+)$/',`
	`32`	`+ '/^%s([a-zA-Z0-9\-_\+~\/\.]+=*)$/',`
`33`	`33`	`'' === $this->tokenType ? '' : preg_quote($this->tokenType).'\s+'`
`34`	`34`	`);`
`35`	`35`	`}`