[core] Cherry pick fallback authorization header

[edoakes]

Cherry pick: #58819

[cursor]

Bug: Client auth function ignores X-Ray-Authorization header

The get_auth_headers_if_auth_enabled function now needs to check for both Authorization and X-Ray-Authorization headers when determining whether to add automatic authentication headers. Currently it only checks for Authorization, so if a user provides an X-Ray-Authorization header, the function will still add an Authorization header, potentially overriding the user's intent. The function should recognize the X-Ray-Authorization header as existing user-provided authentication and skip adding headers in that case.

python/ray/_private/authentication/http_token_authentication.py#L91-L99

ray/python/ray/_private/authentication/http_token_authentication.py

Lines 91 to 99 in 85777d1

	# Check if user provided their own Authorization header (case-insensitive)
	has_user_auth = any(
	key.lower() == authentication_constants.AUTHORIZATION_HEADER_NAME
	for key in user_headers.keys()
	)
	if has_user_auth:
	# User has provided their own auth header, don't override
	return {}

 

---