Do not pass Authorization header in Grafana.net proxy (#6243)

9 years ago · 150d21800c
parent 885e0366c5
commit 150d21800c
1 changed files with 1 additions and 0 deletions
--- a/pkg/api/gnetproxy.go
+++ b/pkg/api/gnetproxy.go
@ -36,6 +36,7 @@ func ReverseProxyGnetReq(proxyPath string) *httputil.ReverseProxy {
 		// clear cookie headers
 		req.Header.Del("Cookie")
 		req.Header.Del("Set-Cookie")
+		req.Header.Del("Authorization")
 	}

 	return &httputil.ReverseProxy{Director: director}