Forward client user-agent to SSO backend on validation refreshes. Matches function of existing proxy_auth_request (copies all headers) and proxy_auth_websocket (copies user-agent when present).

2026-08-10 14:08:17 +00:00
parent 5df2308bdb
commit fdc4fe0a3e
1 changed files with 2 additions and 0 deletions
@@ -88,6 +88,8 @@ async def validate_sso_request(request, *, perm: str = "cista:login") -> dict |
        headers["cookie"] = request.headers["cookie"]
    if "authorization" in request.headers:
        headers["authorization"] = request.headers["authorization"]
+    if "user-agent" in request.headers:
+        headers["user-agent"] = request.headers["user-agent"]
    headers["accept"] = "application/json"
    headers["x-forwarded-for"] = request.client_ip
    headers["x-forwarded-host"] = request.host