Splits MAL authentication and OAuth fields from the shared transport settings.
The X-MAL-CLIENT-ID header is attached only when no access token is
configured: that is MAL's documented use for the header (client-ID-only
access to public endpoints). When a bearer token is present,
Authorization: Bearer is the authentication and the extra header would
only widen client-ID exposure to intermediaries that log request headers.
Unknown keys are rejected with a TypeError at client construction so a
mistyped credential field fails immediately instead of being silently
ignored.
Splits MAL authentication and OAuth fields from the shared transport settings.
The
X-MAL-CLIENT-IDheader is attached only when no access token is configured: that is MAL's documented use for the header (client-ID-only access to public endpoints). When a bearer token is present,Authorization: Beareris the authentication and the extra header would only widen client-ID exposure to intermediaries that log request headers.Unknown keys are rejected with a
TypeErrorat client construction so a mistyped credential field fails immediately instead of being silently ignored.