Ensure request signer adds static auth header *after* signing.

ministryofjustice · Jul 12, 2024 · 01ac1a7 · 01ac1a7
1 parent 000d7d4
commit 01ac1a7
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/service-api/app/src/App/src/DataAccess/ApiGateway/RequestSigner.php b/service-api/app/src/App/src/DataAccess/ApiGateway/RequestSigner.php
@@ -25,10 +25,12 @@ public function __construct(readonly private SignatureV4 $signer, array $headers
 
     public function sign(RequestInterface $request): RequestInterface
     {
+        $request = $this->signer->signRequest($request, $this->credentials);
+
         foreach ($this->headers as $header => $value) {
             $request = $request->withHeader($header, $value);
         }
 
-        return $this->signer->signRequest($request, $this->credentials);
+        return $request;
     }
 }