Aurélien Sibiril a6379bb9f4 Always send Bearer auth for OAuth2 connectors ...

Provider token_type values are not reliably valid HTTP auth schemes
(Slack returns "bot" / "user", some providers send an empty string),
which produces a malformed Authorization header on subsequent
requests. Every OAuth2 connector in this codebase actually uses a
bearer token, so we always send "Bearer".

Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com>

2026-04-22 11:15:48 +02:00

..

apikey.go

Mitiate SSRF attack

2026-04-20 12:11:17 +02:00

connector.go

feat(connector): support OAuth2 scope preservation and incremental auth

2026-04-13 19:24:46 +02:00

oauth2_grant_type.go

Add connector infrastructure for access review

2026-04-02 14:37:29 +02:00

oauth2_test.go

Mitiate SSRF attack

2026-04-20 12:11:17 +02:00

oauth2.go

Always send Bearer auth for OAuth2 connectors

2026-04-22 11:15:48 +02:00

providers.go

Mitiate SSRF attack

2026-04-20 12:11:17 +02:00

registry.go

Pass OAuth2 scopes to connector at initiate time

2026-04-08 11:05:12 +02:00

scopes_test.go

Remove unused ScopesCover function

2026-04-13 19:24:46 +02:00

scopes.go

Remove unused ScopesCover function

2026-04-13 19:24:46 +02:00

slack_test.go

Validate Slack OAuth2 token response

2026-04-13 19:24:46 +02:00

slack.go

Validate Slack OAuth2 token response

2026-04-13 19:24:46 +02:00