Authorization header parameter not received in microflow

Issue

When developing REST operations using a Published REST service with a header parameter named Authorization in Mendix version 10.24.2 and newer, the parameter value is not received in the microflow. The issue specifically occurs when testing the REST service through the Swagger documentation interface generated by Mendix.

Environment

Studio Pro v10.24.2 and newer

Cause

In Mendix version 10.24.2 and newer, the platform uses OpenAPI Specification (OAS) 3.0 for REST service documentation. According to the OAS 3.0 specification, Authorization is a reserved header name and is not allowed as a custom header parameter. As a result, the Authorization header does not appear in the Swagger interface and is not passed to the microflow when testing through rest-docs. In earlier versions of Mendix that used older API specifications, this restriction was not enforced.

Solution/Workaround

To resolve this issue, rename the header parameter from Authorization to a different, non-reserved name.

Additional information

• Mendix documentation: Published REST Services
• Other documentation: OpenAPI Specification