From fdc4fe0a3e3e130a7e0ae14beb29767a1147332d Mon Sep 17 00:00:00 2001 From: Leo Vasanko Date: Mon, 10 Aug 2026 14:08:17 +0000 Subject: [PATCH] Forward client user-agent to SSO backend on validation refreshes. Matches function of existing proxy_auth_request (copies all headers) and proxy_auth_websocket (copies user-agent when present). --- cista/sso.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/cista/sso.py b/cista/sso.py index b5fa160..609ded2 100644 --- a/cista/sso.py +++ b/cista/sso.py @@ -88,6 +88,8 @@ async def validate_sso_request(request, *, perm: str = "cista:login") -> dict | headers["cookie"] = request.headers["cookie"] if "authorization" in request.headers: headers["authorization"] = request.headers["authorization"] + if "user-agent" in request.headers: + headers["user-agent"] = request.headers["user-agent"] headers["accept"] = "application/json" headers["x-forwarded-for"] = request.client_ip headers["x-forwarded-host"] = request.host