Incident Dossier

The Header That Vanished Mid-Flight

Staging canary went green. Production starts dropping protected calls with 401. DevTools shows Authorization leaving the browser. The hop between our gateway and the billing service never receives it — the header map lowercases on write, then looks up the original case on read.

Initial failing signalAuthorization header missing after normalizeExpected behavior: The Authorization header remains Bearer secret-token after normalization. · actual behavior: The Authorization header is missing after normalization.

Progress

1Reproduce the bugRun checks

2Edit the fixOpen

3Pass checksOpen

4Submit fixOpen

Reproduction Steps

Set Authorization with mixed-case name.
Read it back via getHeader.
Forward the hop and inspect the outbound map.

Focus Mode

Start

src/headers.js
src/proxy.js

Likely area

src/headers.js
src/proxy.js
src/request.js

Challenge Coach

Hints reveal broad direction first, then narrow toward the suspect path without showing hidden tests or exact solution code.

TopicNetwork & Connectivity

DifficultyMedium

Est. time15 min

Workspacepreparing

Explorer

Loading files

Evidence Map

Failing signal loaded from challenge API
Workspace files loaded from workspace API
Results rendered only after API run/submit

Autosaved

workspace

Outputread-onlyready$ prepare workspace

Preparing workspace