[BUG] AuthorizeAttribute does not add a header to the request

[N00mBus2000]

Describe the bug

[AttributeUsage(AttributeTargets.Parameter)]
public class AuthorizeAttribute : HeaderAttribute
{
     public AuthorizeAttribute(string scheme = "Bearer")
       : base("Authorization: " + scheme) { }
}

Refit.RequestBuilderImplementation.SetHeader(HttpRequestMessage request, string name/*"Authorization: Bearer"*/, string value)
{
...
var added = request.Headers.TryAddWithoutValidation(name, value);
...
}

but:

var req = new HttpRequestMessage();
var trueResult = req.Headers.TryAddWithoutValidation("Authorization", "Bearer someValue");
var falseResult = req.Headers.TryAddWithoutValidation("Authorization: Bearer", "someValue");

Steps To Reproduce

    internal interface IAuthorizationService
    {
        [Get("/api/auth/refreshToken")]
        Task<Response<AuthToken>> RefreshTokenAsync([Authorize("Bearer")] string token);
    }

Expected behavior
Add header

Environment

• OS: Window 10
• Device: PC
• Version: 10.0.19041 Build 19041
• Working Version: .net core 3.1

[tien]

Yeah got the same issue

[BarsikV]

Please fix this, even better would be to set the authorization scheme for the whole interface, instead of each request.

[N00mBus2000]

Please fix this, even better would be to set the authorization scheme for the whole interface, instead of each request.

You can use this code for the whole interface (e. g.):

    [Headers("Authorization: Bearer", "Content-Type: application/json", "Accept: application/json")]
    internal interface IDataProviderService

[BarsikV]

You can use this code for the whole interface (e. g.):

    [Headers("Authorization: Bearer", "Content-Type: application/json", "Accept: application/json")]
    internal interface IDataProviderService

Yeah, but won't it be overrided by the header on the parameter?

    [Headers("Authorization: Bearer")]
    public interface IDataProviderService
    {
        [Get("")]
        Task<DataDto> GetData([Header("Authorization")]string token);
    }

This doesn't work.
Am I doing it wrong?

[netotz]

Same issue, using Xamarin Forms .NET Standard 2.1, running on Android

[bgribaudo]

Same issue, I believe. [Authorize("Bearer")] string token) isn't working for us.. Using that attribute does not result in any header getting set on the outbound request.

.Net Core 3.1
Refit 5.2.4

[N00mBus2000]

#979

[github-actions]

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.