From 1870a5d78b48c7ced24e3e9f09a53d5c948bdb26 Mon Sep 17 00:00:00 2001
From: "sentry[bot]" <39604003+sentry[bot]@users.noreply.github.com>
Date: Sun, 9 Aug 2026 10:46:57 +0000
Subject: [PATCH] fix: strip BOM and whitespace from authorization token

---
 codecov_cli/helpers/request.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/codecov_cli/helpers/request.py b/codecov_cli/helpers/request.py
index bd1c9a173..6b1fca578 100644
--- a/codecov_cli/helpers/request.py
+++ b/codecov_cli/helpers/request.py
@@ -109,6 +109,7 @@ def get_token_header_or_fail(token: Optional[str]) -> dict:
         raise click.ClickException(
             "Codecov token not found. Please provide Codecov token with -t flag."
         )
+    token = token.strip("\ufeff").strip()
     return {"Authorization": f"token {token}"}
 
 
@@ -118,6 +119,7 @@ def get_token_header(token: Optional[str]) -> Optional[dict]:
     """
     if token is None:
         return None
+    token = token.strip("\ufeff").strip()
     return {"Authorization": f"token {token}"}