Skip to content

fix: Include Authorization header in push notification webhook requests#814

Merged
ehsavoie merged 2 commits intoa2aproject:mainfrom
jmesnil:810_push_notification_authorization
Apr 28, 2026
Merged

fix: Include Authorization header in push notification webhook requests#814
ehsavoie merged 2 commits intoa2aproject:mainfrom
jmesnil:810_push_notification_authorization

Conversation

@jmesnil
Copy link
Copy Markdown
Contributor

@jmesnil jmesnil commented Apr 27, 2026

When PushNotificationConfig includes authentication info, the agent must include the Authorization header in webhook requests per A2A spec section 4.3.3 (PUSH-DELIVER-001). The header is formatted as "{scheme} {credentials}" from the AuthenticationInfo record.

This fixes #810

Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the BasePushNotificationSender to support authentication in push notifications by adding an Authorization header when credentials are provided. The review feedback suggests refining the header construction to prevent malformed values when the authentication scheme or credentials are null or blank, correcting a minor indentation error, and adopting lowercase header names for better HTTP/2 compatibility.

When PushNotificationConfig includes authentication info, the agent must
include the Authorization header in webhook requests per A2A spec
section 4.3.3 (PUSH-DELIVER-001). The header is formatted as
"{scheme} {credentials}" from the AuthenticationInfo record.

This fixes a2aproject#810

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@jmesnil jmesnil force-pushed the 810_push_notification_authorization branch from 0ce1d18 to 54a8ad7 Compare April 27, 2026 14:35
@jmesnil
Copy link
Copy Markdown
Contributor Author

jmesnil commented Apr 27, 2026

tck-test is failing due to PUSH-DELIVER-003 (that's fixed in #813) but the tests for PUSH-DELIVER-001 are passing.

@ehsavoie ehsavoie merged commit 215270c into a2aproject:main Apr 28, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug]: Push notifications webhooks does not include Authorization header from PushNotificationConfig

2 participants