HttpURLConnection can automatically redirect stream load to BE, but there is no authorization information in http request headers after redirect. Maybe HttpURLConnection remove authorization info when do followRedirect. The solution is set the followRedirect property to false on the connection object and do the redirect request manually. #3364