# OAuth2 Bearer Token Header Detector
# Detects Bearer tokens returned in response headers
# Example: Authorization: Bearer eyJhbGciOiJIUzI1NiIs...
#
# Some APIs return tokens directly in response headers instead of body
# This detector captures tokens from Authorization or custom headers
#
# Created: December 2024
# Author: Web Performance Inc

# Detector type: Header to Header Detector
# Copies values from response headers to request headers
detector=hthd

# Descriptive name
detector.name=OAuth2 Bearer Token (Response Header)

# Source header name in the response
# Common: Authorization, X-Auth-Token, X-Access-Token
response.header=Authorization

# Target header name for requests (usually Authorization)
request.header=Authorization

# Enable detector
# DISABLED: This conflicts with BearerTokenFieldDetector which properly handles Bearer tokens
# When enabled, it causes duplicate "Authorization:" prefix in headers
enabled=false

# Platform detection metadata
platform=oauth2
detection.hint=JSON with "access_token", "refresh_token", "token_type", or "Bearer" authorization
