The API we're consuming has a base URL we initially hit but are then redirected to version-specific URL where the API request is ultimately made. If we use the base URL with the plugin, we're getting a 401 error, because the authorization header is not being passed to the redirected URL. This is similar to the StackOverflow article here: https://stackoverflow.com/questions/28564961/authorization-header-is-lost-on-redirect
Postman solves this by having a checkbox to explicitly allow this if the user requires. I'm assuming it is slightly less secure, so having it off by default may make sense here as well.
The API we're consuming has a base URL we initially hit but are then redirected to version-specific URL where the API request is ultimately made. If we use the base URL with the plugin, we're getting a 401 error, because the authorization header is not being passed to the redirected URL. This is similar to the StackOverflow article here: https://stackoverflow.com/questions/28564961/authorization-header-is-lost-on-redirect
Postman solves this by having a checkbox to explicitly allow this if the user requires. I'm assuming it is slightly less secure, so having it off by default may make sense here as well.