fix(auth): use TryAddWithoutValidation for Authorization header

.NET's HttpHeaders.Add() validates the Authorization header value
against the HTTP spec, rejecting PVE's custom PVEAPIToken scheme
that contains @, !, and = in the token string.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Clint Branham
2026-03-17 19:14:03 -05:00
parent dc9b253195
commit 5b0c81a1a8
+1 -1
View File
@@ -280,7 +280,7 @@ namespace PSProxmoxVE.Core.Client
if (_session.AuthMode == PveAuthMode.ApiToken)
{
request.Headers.Add("Authorization", $"PVEAPIToken={_session.ApiToken}");
request.Headers.TryAddWithoutValidation("Authorization", $"PVEAPIToken={_session.ApiToken}");
}
else
{