diff --git a/authome/test_funcs.py b/authome/test_funcs.py
index c6bef89..0452bd2 100644
--- a/authome/test_funcs.py
+++ b/authome/test_funcs.py
@@ -122,6 +122,7 @@ def test_basic_auth_re(self):
         testcases = [
             ("Basic 123456","123456"),
             ("Basic    123456","123456"),
+            ("Basic    123456+=/","123456+=/"),
             (" Basic    123456",None),
             ("Basic    123456 ",None),
             ("Baasic 123456 ",None),
@@ -130,6 +131,21 @@ def test_basic_auth_re(self):
             m = basic_auth_re.search(text)
             self.assertEqual(m.group(1) if m else None ,result,"Basic auth({}) should be {},but got {}".format(text,result,m.group(1) if m else None))
 
+    def test_bearer_token_re(self):
+        print("============================================================================")
+        from .views.views import bearer_token_re
+        testcases = [
+            ("Bearer 123456","123456"),
+            ("Bearer    123456","123456"),
+            (" Bearer    123456",None),
+            ("Bearer    123456 ","123456"),
+            ("Bearer 123456 ", "123456"),
+            ("Bearer 123456%^&$ ", "123456%^&$")
+        ]
+        for text, result in testcases:
+            m = bearer_token_re.search(text)
+            self.assertEqual(m.group(1) if m else None ,result,"The bearer token({}) should be {},but got {}".format(text,result,m.group(1) if m else None))
+
     def test_email_re(self):
         print("============================================================================")
         from .views.views import email_re
diff --git a/authome/views/views.py b/authome/views/views.py
index ed66205..21ab348 100644
--- a/authome/views/views.py
+++ b/authome/views/views.py
@@ -1724,7 +1724,7 @@ def mfa_reset_complete(request,backend,*args,**kwargs):
                        *args, **kwargs)
 
 
-bearer_token_re = re.compile("^Bearer\s+(?P<token>\S+)\s*$")
+bearer_token_re = re.compile("^Bearer\\s+(?P<token>\\S+)\\s*$")
 def _auth_bearer(request):
     """
     Check the bearer authentication