add option to ignore auth

pkg/cassette/cassette.go

@@ -205,6 +205,9 @@ type defaultMatcher struct {
 	// If set to true, the default matcher will ignore matching on the
 	// User-Agent HTTP header.
 	ignoreUserAgent bool
+	// If set to true, the default matcher will ignore matching on the
+	// Authorization HTTP header.
+	ignoreAuthorization bool
 }
 
 // DefaultMatcherOption is a function which configures the default matcher.
@@ -220,6 +223,16 @@ func WithIgnoreUserAgent(val bool) DefaultMatcherOption {
 	return opt
 }
 
+// WithIgnoreAuthorization is a [DefaultMatcherOption], which configures the default
+// matcher to ignore matching on the Authorization HTTP header.
+func WithIgnoreAuthorization(val bool) DefaultMatcherOption {
+	opt := func(m *defaultMatcher) {
+		m.ignoreAuthorization = val
+	}
+
+	return opt
+}
+
 // NewDefaultMatcher returns the default matcher.
 func NewDefaultMatcher(opts ...DefaultMatcherOption) MatcherFunc {
 	m := &defaultMatcher{}
@@ -294,18 +307,21 @@ func (m *defaultMatcher) matcher(r *http.Request, i Request) bool {
 		return false
 	}
 
+	requestHeader := r.Header.Clone()
+	cassetteRequestHeaders := i.Headers.Clone()
+
 	if m.ignoreUserAgent {
-		requestHeader := r.Header.Clone()
 		delete(requestHeader, "User-Agent")
-		cassetteRequestHeaders := i.Headers.Clone()
 		delete(cassetteRequestHeaders, "User-Agent")
-		if !m.deepEqualContents(requestHeader, cassetteRequestHeaders) {
-			return false
-		}
-	} else {
-		if !m.deepEqualContents(r.Header, i.Headers) {
-			return false
-		}
+	}
+
+	if m.ignoreAuthorization {
+		delete(requestHeader, "Authorization")
+		delete(cassetteRequestHeaders, "Authorization")
+	}
+
+	if !m.deepEqualContents(requestHeader, cassetteRequestHeaders) {
+		return false
 	}
 
 	if !m.bodyMatches(r, i) {

pkg/cassette/cassette_test.go

@@ -250,4 +250,22 @@ func TestMatcher(t *testing.T) {
 			}
 		})
 	})
+
+	t.Run("IgnoreAuthorization=true", func(t *testing.T) {
+		matcherFn := NewDefaultMatcher(WithIgnoreAuthorization(true))
+
+		t.Run("match", func(t *testing.T) {
+			r, i := getMatcherRequests(t)
+
+			r.Header = http.Header{
+				"Authorization": {"Bearer xyz"},
+			}
+
+			i.Headers = http.Header{}
+
+			if b := matcherFn(r, i); !b {
+				t.Fatalf("request should have matched")
+			}
+		})
+	})
 }