# Why we remove HttpHeaderNames.AUTHORIZATION in case use Proxy?

**URL:** <https://community.gatling.io/t/why-we-remove-httpheadernames-authorization-in-case-use-proxy/5665>\
**Category:** Gatling (Open-Source)\
**Created:** [June 12, 2020, 9:38am UTC](https://community.gatling.io/t/why-we-remove-httpheadernames-authorization-in-case-use-proxy/5665 "2020-06-12T09:38:24Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Th\_nh\_Lam](https://avatars.discourse-cdn.com/v4/letter/t/45deac/32.png) [@Th\_nh\_Lam](https://community.gatling.io/u/Th_nh_Lam)\
**Post date:** [June 12, 2020, 9:38am UTC](https://community.gatling.io/t/why-we-remove-httpheadernames-authorization-in-case-use-proxy/5665/1 "2020-06-12T09:38:24Z")

</div>

Hi Guys,

I was trying to use a proxy for my scenario.

I have an application A behind a proxy B. The application A requires Bearer Authorization.

My set up for testing:

`

private val httpConfig = http.disableWarmUp.proxy( Proxy(“localhost”, 8080))

setUp( new Scenario()).protocols(httpConfig)

`

I tried to send a GET request to the application A and also provided Bearer token.

But on RedirectProcessor, the Authorization header has been removed.

![Auto Generated Inline Image 1.png](https://europe1.discourse-cdn.com/flex013/uploads/gatling2/original/1X/bee88213d2cff6f695d7734dd56318089c924597.png)

Why should we remove it? Could we have an option to keep Authorization header

---

<div class="post-metadata">

**Author:** ![slandelle](https://dub1.discourse-cdn.com/flex013/user_avatar/community.gatling.io/slandelle/32/4_2.png) [@slandelle](https://community.gatling.io/u/slandelle)\
**Post date:** [June 12, 2020, 9:51am UTC](https://community.gatling.io/t/why-we-remove-httpheadernames-authorization-in-case-use-proxy/5665/2 "2020-06-12T09:51:28Z")

</div>

Thanks for reporting: [https://github.com/gatling/gatling/issues/3910](https://github.com/gatling/gatling/issues/3910)

![Auto Generated Inline Image 1.png](https://europe1.discourse-cdn.com/flex013/uploads/gatling2/original/1X/bee88213d2cff6f695d7734dd56318089c924597.png)

---

<div class="post-metadata">

**Author:** ![Th\_nh\_Lam](https://avatars.discourse-cdn.com/v4/letter/t/45deac/32.png) [@Th\_nh\_Lam](https://community.gatling.io/u/Th_nh_Lam)\
**Post date:** [June 15, 2020, 6:43am UTC](https://community.gatling.io/t/why-we-remove-httpheadernames-authorization-in-case-use-proxy/5665/3 "2020-06-15T06:43:39Z")

</div>

Is the Authorization header removed because it related to a Security issue, or Is it just simply a bug?