Shohei Okumiya
Shohei Okumiya
The current implementation [stores the retrieved access token in AuthSession#headers](https://github.com/apache/iceberg/blob/c22bac8b170aa5e5c931c11c4c393c27245b20b9/core/src/main/java/org/apache/iceberg/rest/auth/OAuth2Util.java#L696), and the [AuthSession](https://github.com/apache/iceberg/blob/c22bac8b170aa5e5c931c11c4c393c27245b20b9/core/src/main/java/org/apache/iceberg/rest/auth/OAuth2Manager.java#L265-L266) and [its headers](https://github.com/apache/iceberg/blob/c22bac8b170aa5e5c931c11c4c393c27245b20b9/core/src/main/java/org/apache/iceberg/rest/auth/OAuth2Util.java#L661) are reused. This causes the OAuth2Manager sends an access token via the Authorization header...