go-pkgz / requester / 32221645699

93%

main: 88%

Build Type

Pull #13

github

Committed by paskal

Commit Message

fix: keep credentials on the host the request started from

Header and BasicAuth restored credentials on every hop, including the ones
the client stripped when a redirect left the original host, so a 302 to
another host received them.

Credentials are now set while the chain stays on the original host or one
of its subdomains, matching how the standard client decides it, and
SecretHeader gives the same protection to a custom header carrying a
secret.

Pull Request Pull Request #13: fix: keep credentials on the host the request started from

Coverage Stats

65 of 67 new or added lines in 1 file covered. (97.01%)

2 existing lines in 1 file now uncovered.

590 of 636 relevant lines covered (92.77%)

19.42 hits per line