fix: attach Authorization header to streaming and ApiExecutor requests (#330)#331

Merged

SoulPancake merged 11 commits into

openfga:mainfrom

cportcvent:fix/issue-330

Apr 30, 2026

Commits on Apr 22, 2026

fix: Issue #330 added ApiClient#applyAuthHeader as a single entry point for attaching OAuth2 Authorization header.
cportcvent
committed
fix: #330 use setHeader on request builder to address duplicate Authorization header
cportcvent
committed
test: #330 improve coverage on ApiClient changeset
cportcvent
committed
fix: #330 defensively pivot to concurrent map of OAuth2Client to protect multi-tenant credentials
cportcvent
committed
fix: #330 do not keep raw client secret value in cached keys on heap
cportcvent
committed
fix: #330 address check-then-act race for access token using single-flight pattern in OAuth2Client
cportcvent
committed

Commits on Apr 23, 2026

Commits on Apr 24, 2026

Commits on Apr 28, 2026

fix: #330 address possible redundant token exchange with refactor to strict mutex; includes regression test
cportcvent
committed