Add OverwriteAuthorizationHeader flag (#12)

* Add OverwriteAuthorizationHeader flag so consumers can choose to always overwrite any existing Authorization header

Co-authored-by: Bjørn Dybvik Langfors <[email protected]>

src/Altinn.ApiClients.Maskinporten/Config/MaskinportenSettings.cs

@@ -78,5 +78,10 @@ public class MaskinportenSettings
         /// Optional. Enabels verbose logging that should only be enabled when troubleshooting. Will cause logging (with severity "Information") of assertions.  
         /// </summary>
         public bool? EnableDebugLogging { get; set; }
+
+        /// <summary>
+        /// Optional. Overwrites existing Authorization-header if set. Default: ignore existing Authorization-header.
+        /// </summary>
+        public bool? OverwriteAuthorizationHeader { get; set; }
     }
 }

src/Altinn.ApiClients.Maskinporten/Handlers/MaskinportenTokenHandler.cs

@@ -21,7 +21,9 @@ public MaskinportenTokenHandler(IMaskinportenService maskinporten, IClientDefini
 
         protected override async Task<HttpResponseMessage> SendAsync(HttpRequestMessage request, CancellationToken cancellationToken)
         {
-            if (request.Headers.Authorization == null)
+            if (request.Headers.Authorization == null ||
+                (_clientDefinition.ClientSettings.OverwriteAuthorizationHeader .HasValue &&
+                _clientDefinition.ClientSettings.OverwriteAuthorizationHeader .Value))
             {
                 TokenResponse tokenResponse = await GetTokenResponse(cancellationToken);
                 if (tokenResponse != null)