--- a/util/sasl/oauthbearer.lua	Tue Mar 21 01:46:47 2023 +0300
+++ b/util/sasl/oauthbearer.lua	Tue Mar 21 14:01:03 2023 +0000
@@ -11,7 +11,7 @@
 		return "failure", "not-authorized";
 	end
 
-	local gs2_header, kvpairs = message:match("^(n,[^,]*,),(.+)$");
+	local gs2_header, kvpairs = message:match("^(n,[^,]*,)(.+)$");
 	if not gs2_header then
 		return "failure", "malformed-request";
 	end