@@ -1,6 +1,7 @@

 package bearertoken

 import (

+	"errors"

 	"net/http"

 	"strings"

@@ -19,6 +20,8 @@ func New(auth authenticator.Token, removeHeader bool) *Authenticator {

 	return &Authenticator{auth, removeHeader}

 }

+var invalidToken = errors.New("invalid bearer token")

+

 func (a *Authenticator) AuthenticateRequest(req *http.Request) (user.Info, bool, error) {

 	auth := strings.TrimSpace(req.Header.Get("Authorization"))

 	if auth == "" {

@@ -40,5 +43,8 @@ func (a *Authenticator) AuthenticateRequest(req *http.Request) (user.Info, bool,

 	if ok && a.removeHeader {

 		req.Header.Del("Authorization")

 	}

+	if !ok && err == nil {

+		err = invalidToken

+	}

 	return user, ok, err

 }

@@ -77,7 +77,7 @@ func TestBearerToken(t *testing.T) {

 			RemoveHeader:                 true,

 			ExpectedUserName:             "",

 			ExpectedOK:                   false,

-			ExpectedErr:                  false,

+			ExpectedErr:                  true,

 			ExpectedAuthorizationHeaders: []string{"Bearer 123"},

 		},

 		"error bearer token": {