A customer has shown us in their logs that they are configuring an authHeader (a Bearer token) for use with authUrl requests to get a token. It is correctly being used.
However, later when the client requests a token using the tokenRequest, it sends the same Bearer header incorrectly.
The authParams and authHeaders should only be used for authUrl requests.