Is the org Bearer token forwarded to the app on a private Sprite URL?

General
,
1

For a Sprite URL with url_settings.auth = sprite, we send Authorization: Bearer <org token> to https://<sprite>-<org>.sprites.app/.

After the edge authenticates the request, is Authorization stripped before the request is proxied to the HTTP service (e.g. port 3000)?

Can application code (getRequestHeader('authorization') / raw Node headers) ever see that org token? Is this guaranteed, or an implementation detail that might change?

3

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.