From b926732915132afbe4e40af8a7dcd88a426cf810 Mon Sep 17 00:00:00 2001 From: sascha Date: Sat, 18 Apr 2026 10:05:12 +0200 Subject: [PATCH] Fix: strip butler auth header before forwarding to backends --- app.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/app.py b/app.py index 0bee6e2..a9b09df 100644 --- a/app.py +++ b/app.py @@ -98,8 +98,8 @@ async def proxy(service: str, path: str, request: Request, _=Depends(_verify)): headers = dict(request.headers) cookies = {} - # Remove hop-by-hop headers - for h in ["host", "content-length", "transfer-encoding"]: + # Remove hop-by-hop headers and butler auth (replaced by service auth below) + for h in ["host", "content-length", "transfer-encoding", "authorization"]: headers.pop(h, None) # Build auth