[Amolith]

The default OAuth token getter, when the token endpoint returns expires_in <= 60, can trigger four token acquisitions in the same request:

• oauth_bearer_token calls access_token_with_refresh once to check for nil and again to construct the bearer header
  • Fixed by using the same token for both the nil check and the header
• update_params_for_auth! rebuilds auth settings for each auth scheme, so the default Basic+OAuth2 then constructs the bearer header twice
  • Fixed by building auth settings once per request

[bwappsec]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.