Prevent dropping of Authorization Header on redirect

What is the name of the domain?

smartfuelapp.co.za

What is the issue you’re encountering

We have a DNS A record redirecting to our host running an API. However, when the API request to login is redirected, the basic authorization is dropped and does not reach our API. Is there a way to prevent Cloudflare from dropping the authorization header?

What feature, service or problem is this related to?

DNS records

Depending on where the redirect is coming from this is expected as you see below for the authorization header document.

“This header is stripped from cross-origin redirects.”

As you see this is intended. Per the article. Below is a stackoverflow post that may have some insight on how to pass this header without losing it.

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.