Redirect Causes a Lost Authorization Header
nickheidke opened this issue · 0 comments
nickheidke commented
The API we're consuming has a base URL we initially hit but are then redirected to version-specific URL where the API request is ultimately made. If we use the base URL with the plugin, we're getting a 401 error, because the authorization header is not being passed to the redirected URL. This is similar to the StackOverflow article here: https://stackoverflow.com/questions/28564961/authorization-header-is-lost-on-redirect
Postman solves this by having a checkbox to explicitly allow this if the user requires. I'm assuming it is slightly less secure, so having it off by default may make sense here as well.