From 6389887ebbae0ce495912008878422b025044093 Mon Sep 17 00:00:00 2001
From: "user.email" <chrislusf@users.noreply.github.com>
Date: Mon, 26 Oct 2026 02:56:46 -0700
Subject: [PATCH] seaweed-volume: drop proxy-specific headers from replica
 proxy reads

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
---
 seaweed-volume/src/server/handlers.rs | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/seaweed-volume/src/server/handlers.rs b/seaweed-volume/src/server/handlers.rs
index e6d83baf74..90bcaa3da7 100644
--- a/seaweed-volume/src/server/handlers.rs
+++ b/seaweed-volume/src/server/handlers.rs
@@ -962,6 +962,9 @@ async fn proxy_request(
         "te",
         "trailer",
         "upgrade",
+        "proxy-connection",
+        "proxy-authenticate",
+        "proxy-authorization",
     ] {
         hop_by_hop.insert(fixed.to_string());
     }
@@ -5676,6 +5679,10 @@ mod tests {
             "x-hop-marker",
             header::HeaderValue::from_static("private"),
         );
+        original_headers.insert(
+            "proxy-authorization",
+            header::HeaderValue::from_static("Basic cHJveHk6c2VjcmV0"),
+        );
         let info = ProxyRequestInfo {
             method: Method::GET,
             original_headers,
@@ -5700,6 +5707,7 @@ mod tests {
             "transfer-encoding",
             "connection",
             "x-hop-marker",
+            "proxy-authorization",
         ] {
             assert!(
                 !headers.iter().any(|(n, _)| n == dropped),