From 6371ff5ae8b53f95b0a3da1d2530003e9a02215c Mon Sep 17 00:00:00 2001
From: Lakhan Samani <lakhan.m.samani@gmail.com>
Date: Sat, 4 Apr 2026 19:08:49 +0530
Subject: [PATCH] fix(security): fix ExtraHeaders bug and add HTTP client
 timeout in Go SDK

---
 client.go  | 2 +-
 graphql.go | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/client.go b/client.go
index 2400737..40a698f 100644
--- a/client.go
+++ b/client.go
@@ -46,6 +46,6 @@ func NewAuthorizerClient(clientID, authorizerURL, redirectURL string, extraHeade
 		RedirectURL:   strings.TrimSuffix(redirectURL, "/"),
 		AuthorizerURL: strings.TrimSuffix(authorizerURL, "/"),
 		ClientID:      clientID,
-		ExtraHeaders:  extraHeaders,
+		ExtraHeaders:  headers,
 	}, nil
 }
diff --git a/graphql.go b/graphql.go
index 4a37923..02134e5 100644
--- a/graphql.go
+++ b/graphql.go
@@ -6,6 +6,7 @@ import (
 	"errors"
 	"io"
 	"net/http"
+	"time"
 )
 
 // GraphQLRequest is object used to make graphql queries
@@ -30,7 +31,7 @@ func (c *AuthorizerClient) ExecuteGraphQL(req *GraphQLRequest, headers map[strin
 		return nil, err
 	}
 
-	client := http.Client{}
+	client := http.Client{Timeout: 30 * time.Second}
 	httpReq, err := http.NewRequest(http.MethodPost, c.AuthorizerURL+"/graphql", bytes.NewReader(jsonReq))
 	if err != nil {
 		return nil, err