fix: remove authorization header from frontend (#781)

Author: knudtty

packages/api/src/routers/api/clickhouseProxy.ts

@@ -69,6 +69,11 @@ const getConnection: RequestHandler =
   // prettier-ignore-next-line
   async (req, res, next) => {
     try {
+      if (req.headers['authorization'] === 'Basic Og==') {
+        // this means username & password === 0, which indicates we must be
+        // doing some other authorization mechanism (probably connection_id)
+        delete req.headers['authorization'];
+      }
       const { teamId } = getNonNullUserWithTeam(req);
       const connection_id = req.headers['x-hyperdx-connection-id']!; // ! because zod already validated
       delete req.headers['x-hyperdx-connection-id'];

packages/common-utils/src/clickhouse.ts

@@ -455,6 +455,8 @@ export class ClickhouseClient {
             wait_end_of_query: 0,
             cancel_http_readonly_queries_on_client_close: 1,
           },
+          username: '',
+          password: '',
           compression: {
             response: true,
           },