From f5bfcf5d7658bdc0e1039f13f39f47d4b1098c53 Mon Sep 17 00:00:00 2001 From: Sylvain Rascar Date: Tue, 18 Apr 2023 10:13:51 +0100 Subject: [PATCH] fix(#34627): forward Authorization header from original request on redirect --- .../Libraries/Network/RCTHTTPRequestHandler.mm | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/packages/react-native/Libraries/Network/RCTHTTPRequestHandler.mm b/packages/react-native/Libraries/Network/RCTHTTPRequestHandler.mm index b7b2db1e57e3..b0b7b1c5555f 100644 --- a/packages/react-native/Libraries/Network/RCTHTTPRequestHandler.mm +++ b/packages/react-native/Libraries/Network/RCTHTTPRequestHandler.mm @@ -143,6 +143,13 @@ - (void)URLSession:(NSURLSession *)session NSArray *cookies = [[NSHTTPCookieStorage sharedHTTPCookieStorage] cookiesForURL:request.URL]; nextRequest.allHTTPHeaderFields = [NSHTTPCookie requestHeaderFieldsWithCookies:cookies]; + + NSString *originalAuthorizationHeader = [task.originalRequest valueForHTTPHeaderField:@"Authorization"]; + + // Forward the original Authorization header if set + if (originalAuthorizationHeader) { + [nextRequest addValue:originalAuthorizationHeader forHTTPHeaderField:@"Authorization" ]; + } completionHandler(nextRequest); }