Only removes the authorization header when switching hostnames (#334)

yarnpkg · Aug 5, 2019 · 25a2f00 · 25a2f00
1 parent 883927b
commit 25a2f00
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/packages/berry-core/sources/httpUtils.ts b/packages/berry-core/sources/httpUtils.ts
@@ -60,11 +60,17 @@ async function request(target: string, body: Body, {configuration, headers, json
       : globalHttpsAgent;
 
   const gotOptions = {agent, body, headers, json, method, encoding: null};
+  let hostname: string | undefined;
 
   const makeHooks = <T extends string | null>() => ({
+    beforeRequest: [
+      (options: GotOptions<T>) => {
+        hostname = options.hostname;
+      },
+    ],
     beforeRedirect: [
       (options: GotOptions<T>) => {
-        if (options.headers && options.headers.authorization) {
+        if (options.headers && options.headers.authorization && options.hostname !== hostname) {
           delete options.headers.authorization;
         }
       },