Confidential Ledger SDK update SensitiveHeaderCleanupPolicy for CCF redirection change

sdk/confidentialledger/azure-confidentialledger/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Release History
 
+## 2.0.0b2 (Unreleased)
+
+### Bugs Fixed
+
+- Fixed authentication failure on HTTP redirects by preserving sensitive headers during service-managed redirects within the Confidential Ledger endpoint.
+
 ## 2.0.0b1 (2025-10-20)
 
 ### Features Added

sdk/confidentialledger/azure-confidentialledger/azure/confidentialledger/_client.py

@@ -52,7 +52,13 @@ def __init__(  # pylint: disable=missing-client-constructor-parameter-credential
                 self._config.custom_hook_policy,
                 self._config.logging_policy,
                 policies.DistributedTracingPolicy(**kwargs),
-                policies.SensitiveHeaderCleanupPolicy(**kwargs) if self._config.redirect_policy else None,
+                # Redirect cleanup is disabled to preserve authentication and ledger-specific headers
+                # on service-managed redirects. Confidential Ledger redirects are expected to stay within
+                # the same trusted ledger endpoint, so forwarding these sensitive headers is required
+                # for correct authentication behavior.
+                policies.SensitiveHeaderCleanupPolicy(
+                    disable_redirect_cleanup=True, **kwargs
+                ) if self._config.redirect_policy else None,
                 self._config.http_logging_policy,
             ]
         self._client: PipelineClient = PipelineClient(base_url=_endpoint, policies=_policies, **kwargs)