i never claimed to be a cybersecurity wizard...

Author: GreemDev

src/Server/Controllers/Api/v1/Admin/RefreshCacheController.cs

@@ -33,7 +33,7 @@ public async Task<ActionResult> Action([FromQuery] string rc)
             return Problem(
                 $"Unknown release channel '{rc}'; valid are '{Constants.StableRoute}' and '{Constants.CanaryRoute}'", statusCode: 404);
 
-        if (!AdminEndpointMetadata.AccessToken.EqualsIgnoreCase(HttpContext.Request.Headers.Authorization))
+        if (!AdminEndpointMetadata.AccessToken.Equals(adminAccessToken))
             return Unauthorized();
 
         var minutesSinceLastRefresh = (DateTimeOffset.Now - LastRefreshes[releaseChannel]).TotalMinutes;

src/Server/Controllers/Api/v1/Admin/VersioningController.cs

@@ -71,7 +71,7 @@ public async Task<ActionResult> Increment([FromQuery] string rc)
                 $"Unknown release channel '{rc}'; valid are '{Constants.StableRoute}' and '{Constants.CanaryRoute}'",
                 statusCode: 404);
 
-        if (!AdminEndpointMetadata.AccessToken.EqualsIgnoreCase(HttpContext.Request.Headers.Authorization))
+        if (!AdminEndpointMetadata.AccessToken.Equals(adminAccessToken))
             return Unauthorized();
 
         var versionProviderService = HttpContext.RequestServices
@@ -99,7 +99,7 @@ public async Task<ActionResult> Advance()
                 statusCode: 418);
 
 
-        if (!AdminEndpointMetadata.AccessToken.EqualsIgnoreCase(HttpContext.Request.Headers.Authorization))
+        if (!AdminEndpointMetadata.AccessToken.Equals(adminAccessToken))
             return Unauthorized();
 
         var versionProviderService = HttpContext.RequestServices