AccessTokenRequestReactiveFilter::propagateToken duplicates the authorization header

[sahuefficy]

quarkus/extensions/oidc-token-propagation-reactive/runtime/src/main/java/io/quarkus/oidc/token/propagation/reactive/AccessTokenRequestReactiveFilter.java

Line 127 in 58bc0c4

requestContext.getHeaders().add(HttpHeaders.AUTHORIZATION, BEARER_SCHEME_WITH_SPACE + accessToken);

duplicates the authorization header with bearer scheme in case a re-attempt is made to an end point within the same same request handling paradigm.

I faced that while implementing retry for a RestClient.

I will send a PR shortly.

[sberyozkin]

@sahuefficy thanks, can you please also check if the header should be set instead of being added in the non reactive version

[sahuefficy]

Did you refer to the following:

quarkus/extensions/oidc-token-propagation/runtime/src/main/java/io/quarkus/oidc/token/propagation/runtime/AbstractTokenRequestFilter.java

Line 26 in 58bc0c4

requestContext.getHeaders().add(HttpHeaders.AUTHORIZATION, BEARER_SCHEME_WITH_SPACE + token);

I can see the same pattern there too.

[sahuefficy]

This has been in all versions. I am using 2.16 though.

[quarkus-bot]

/cc @pedroigor (bearer-token)