fix: attach Authorization header to streaming and ApiExecutor requests (#330) - #331

Merged

SoulPancake merged 11 commits into

openfga:mainfrom

cportcvent:fix/issue-330

Apr 30, 2026

Commits on Apr 22, 2026

fix: Issue #330 added ApiClient#applyAuthHeader as a single entry point for attaching OAuth2 Authorization header.
cportcvent
committed
11ab8e4
fix: #330 use setHeader on request builder to address duplicate Authorization header
cportcvent
committed
f9f2e41
test: #330 improve coverage on ApiClient changeset
cportcvent
committed
026f269
fix: #330 defensively pivot to concurrent map of OAuth2Client to protect multi-tenant credentials
cportcvent
committed
06b048a
fix: #330 do not keep raw client secret value in cached keys on heap
cportcvent
committed
5a7754e
fix: #330 address check-then-act race for access token using single-flight pattern in OAuth2Client
cportcvent
committed
bb21de7

Commits on Apr 23, 2026

Commits on Apr 24, 2026

Commits on Apr 28, 2026

fix: #330 address possible redundant token exchange with refactor to strict mutex; includes regression test
cportcvent
committed
93de0d7