The provider descriptor whose stripHeaders rule the rewrite applies.
The operation's current auth material, read live at swap time so auth changed through any other path survives the replay.
The fresh access token from the refresh grant.
The replacement RequestAuthInput.
Builds the auth material an operation replays with after a refresh.
The swap replaces the bearer token and preserves the other headers the caller attached to structured auth, such as proxy or tracing headers. It removes headers listed by the descriptor. MAL strips its client-ID header because the replay uses the bearer token; keeping the old header would expose the client ID to intermediaries that log request headers. An empty headers object becomes
undefined.