Summary

• Track the original request origin and treat scheme/host/effective-port changes as cross-origin redirects.
• Strip Authorization, Cookie, and Proxy-Authorization before sending redirected requests to a different origin.
• Skip reapplying CLI Basic/Bearer auth, AWS SigV4 signing, and digest replay on cross-origin redirects.
• Add integration coverage with two local servers for explicit sensitive headers, CLI auth, AWS auth, and digest auth.

Testing

• cargo fmt
• cargo clippy --locked --all-targets --all-features -- -D warnings
• cargo test --all-features
• cargo test --all-features --test integration -- --test-threads=1