[CXF-7687] AuthorizationPolicy: AuthorizationType="Bearer" has no effect

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.2.3
• Fix Version/s: 3.1.16, 3.2.4
• Component/s: Core, Transports
• Estimated Complexity: Unknown
• Assignee: Colm O hEigeartaigh
• Reporter: Dietmar Temme
• Created: 22/Mar/18 12:28
• Updated: 17/Apr/18 00:56
• Resolved: 22/Mar/18 15:03

Description

Adding an AuthorizationPolicy object with AuthorizationType set to "Bearer" to the Client HTTPConduit object has no effect.

No "Authorization: Bearer xxx" header is added to the cxf request.

Workaround: add the Authorization header directly:

client.getRequestContext().put(Message.PROTOCOL_HEADERS, authorizationHeader);

and authorizationHeader containing the desired header/value.