Revert "Stripping out Authorization header on redirect to a different host"

This reverts commit 08b31872bf4094bbef474cae6de6c90fb4245a99.

1 files changed, 1 insertions, 3 deletions

diff --git a/lib/chef/http.rb b/lib/chef/http.rb
index a10906443b..241806da4e 100644
--- a/lib/chef/http.rb
+++ b/lib/chef/http.rb
@@ -381,9 +381,7 @@ class Chef
         elsif redirect_location = redirected_to(response)
           if [:GET, :HEAD].include?(method)
             follow_redirect do
-              redirected_url = url + redirect_location
-              headers.delete("Authorization") if url.host != redirected_url.host
-              send_http_request(method, redirected_url, headers, body, &response_handler)
+              send_http_request(method, url + redirect_location, headers, body, &response_handler)
             end
           else
             raise Exceptions::InvalidRedirect, "#{method} request was redirected from #{url} to #{redirect_location}. Only GET and HEAD support redirects."