--- a/roundup/cgi/client.py	Thu Jun 08 09:27:17 2023 -0400
+++ b/roundup/cgi/client.py	Thu Jun 08 20:38:29 2023 -0400
@@ -1083,7 +1083,7 @@
 
     def authenticate_bearer_token(self, challenge):
         ''' authenticate the bearer token. Refactored from determine_user()
-            to alow it to be overridden if needed.
+            to allow it to be overridden if needed.
         '''
         try:  # will jwt import?
             import jwt
@@ -1190,7 +1190,7 @@
                     try:
                         # make sure to str(token['sub']) the
                         # subject. As decoded by json, it is unicode
-                        # which thows an error when used with 'nodeid
+                        # which throws an error when used with 'nodeid
                         # in db' down the call chain.
                         user = self.db.user.get(str(token['sub']), 'username')
                     except IndexError: