Merge pull request #64 from CanDIG/daisieh/auth-header

Authorization header still required
CanDIG · Sep 8, 2022 · 5782215 · 5782215
2 parents b8d9cd8 + afac44d
commit 5782215
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/chord_metadata_service/restapi/candig_authz_middleware.py b/chord_metadata_service/restapi/candig_authz_middleware.py
@@ -99,7 +99,10 @@ def get_opa_datasets(self, token, path, method):
         try:
             response = requests.post(
                 settings.CANDIG_OPA_URL + "/v1/data/permissions/datasets",
-                headers={"X-Opa": f"{settings.CANDIG_OPA_SECRET}"},
+                headers={
+                    "X-Opa": f"{settings.CANDIG_OPA_SECRET}",
+                    "Authorization": f"Bearer {token}"
+                },
                 json={
                     "input": {
                             "token": token,