[naveenkumarsp]

Summary

When using AUTH_TYPE=OAUTH2PROXY, server-side rendered (SSR) components make internal requests to the Keep backend via createServerApiClient().

Currently, createServerApiClient() forwards only identity headers (x-forwarded-user, x-forwarded-email, x-forwarded-groups, x-forwarded-access-token). In deployments where reverse proxies or sidecars independently authenticate inbound backend requests with session validation, internal server-to-server calls fail with 401 Unauthorized / 302 Redirect because the session cookie header is dropped.

This causes SSR pages like /incidents and /alerts/feed (which preload initial facets using Server Components) to fail during server rendering.

Changes

• Forward the incoming request's cookie header in createServerApiClient() when AUTH_TYPE === AuthType.OAUTH2PROXY.
• Removed leftover debug console.log statements in createServerApiClient.ts.
• Added unit tests in keep-ui/shared/tests/createServerApiClient.test.ts covering header & cookie forwarding behavior.

Testing

• Verified that createServerApiClient() propagates the cookie header alongside standard OAuth2-proxy identity headers.
• Tested against a full local reproduction stack with reverse proxy auth: server-side components on /incidents and /alerts/feed load initial facets successfully.

[CLAassistant]

All committers have signed the CLA.

[github-actions]

No linked issues found. Please add the corresponding issues in the pull request description.
Use GitHub automation to close the issue when a PR is merged

[shahargl]

@naveenkumarsp can u link the ticket? (if there is nothing exist - create one?)
also , can you sign the CLA?

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 30.46%. Comparing base (ce302f6) to head (0c249a1).
⚠️ Report is 19 commits behind head on main.

Additional details and impacted files

@@             Coverage Diff             @@
##             main    #6750       +/-   ##
===========================================
- Coverage   46.42%   30.46%   -15.96%     
===========================================
  Files         178      101       -77     
  Lines       18694    11773     -6921     
===========================================
- Hits         8679     3587     -5092     
+ Misses      10015     8186     -1829     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[naveenkumarsp]

@shahargl - raised a ticket - #6803 and also accepted the CLA. please review and let me know if there is any questions or clarification requried.

[shahargl]

why did u remove the console.log?

[shahargl]

@naveenkumarsp also frontend tests fails now

[naveenkumarsp]

@naveenkumarsp also frontend tests fails now

@shahargl - apologies as i had missed this notification. Let me check and update the branch. also enable the console logs which were removed.

[naveenkumarsp]

@shahargl - i have fixed the issue as well as reverted the console logs.. please review.