From 4c9167f5fd9fe30373f509b8da4a08edcd194dc3 Mon Sep 17 00:00:00 2001
From: Asier Isayas <aisayas@microsoft.com>
Date: Mon, 17 Aug 2026 09:41:38 -0700
Subject: [PATCH] Send authorization header for connection string login backend
 calls

---
 src/Common/CosmosClient.ts         | 1 +
 src/hooks/usePortalAccessToken.tsx | 1 +
 2 files changed, 2 insertions(+)

diff --git a/src/Common/CosmosClient.ts b/src/Common/CosmosClient.ts
index 54444d09e..1bff3f80b 100644
--- a/src/Common/CosmosClient.ts
+++ b/src/Common/CosmosClient.ts
@@ -143,6 +143,7 @@ export async function getTokenFromAuthService(
       headers: {
         "content-type": "application/json",
         "x-ms-encrypted-auth-token": userContext.accessToken,
+        authorization: userContext.accessToken,
       },
       body: JSON.stringify({
         verb,
diff --git a/src/hooks/usePortalAccessToken.tsx b/src/hooks/usePortalAccessToken.tsx
index bf59dc63f..4740d699e 100644
--- a/src/hooks/usePortalAccessToken.tsx
+++ b/src/hooks/usePortalAccessToken.tsx
@@ -7,6 +7,7 @@ export async function fetchAccessData(portalToken: string): Promise<AccessInputM
   const headers = new Headers();
   // Portal encrypted token API quirk: The token header must be URL encoded
   headers.append(HttpHeaders.guestAccessToken, encodeURIComponent(portalToken));
+  headers.append(HttpHeaders.authorization, encodeURIComponent(portalToken));
   const url: string = `${configContext.PORTAL_BACKEND_ENDPOINT}/api/connectionstring/runtimeproxy/accessinputmetadata`;
   const options = {
     method: "GET",