Skip to content

fix(realtime): omit authorization header when no access token exists #1937

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
7ttp wants to merge 1 commit into
base: master
Choose a base branch
from
Open

fix(realtime): omit authorization header when no access token exists #1937

7ttp wants to merge 1 commit into from

Conversation

@7ttp
Copy link
Contributor

@7ttp 7ttp commented Dec 9, 2025 •
edited
Loading

summary

when using the realtime rest fallback without a session, the client sends an empty authorization header which causes a 500 error from the server.

problem

the rest fallback in httpSend() and send()always includes an authorization header, even when no token exists. this results in Authorization: (empty value) being sent, which the server rejects with 500.

fix

only add the authorization header when AccessTokenValue is truthy. the server accepts requests with just the apikey header.

closes #1936 & #1590
supersedes #1561

cc @mandarini
@7ttp 7ttp requested review from a team as code owners December 9, 2025 15:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

1 participant

@7ttp