{"version":"2.1.124","anchor":"bedrock-auth-header-normalization","canonical_anchor":"bedrock-auth-header-normalization","heading":"Bedrock auth header normalization","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.124\/e\/bedrock-auth-header-normalization","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.124","markdown":"### Bedrock auth header normalization\n\nThe Bedrock client now always sets `Authorization: null` in `defaultHeaders` and re-injects the bearer or service-tier headers explicitly. This stops a leaked Authorization header from a parent fetch leaking into Bedrock requests.\n\n**Evidence**\n\nBedrock client builder (search for `Authorization: null`)."}