Set the authorization header when calling an API. Otherwise, no API call will succeed.

chrome/common/net/gaia/oauth2_api_call_flow.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/net/gaia/oauth2_api_call_flow.h"
 
 #include <string>
 #include <vector>
 
 #include "base/basictypes.h"
+#include "base/stringprintf.h"
 #include "chrome/common/net/gaia/gaia_urls.h"
 #include "net/base/escape.h"
 #include "net/base/load_flags.h"
 #include "net/http/http_status_code.h"
 #include "net/url_request/url_request_context_getter.h"
 #include "net/url_request/url_request_status.h"
 
 using content::URLFetcher;
 using content::URLFetcherDelegate;
 using net::ResponseCookies;
 using net::URLRequestContextGetter;
 using net::URLRequestStatus;
 
+namespace {
+static const char kAuthorizationHeaderFormat[] =
+    "Authorization: Bearer %s";
+
+static std::string MakeAuthorizationHeader(const std::string& auth_token) {
+  return StringPrintf(kAuthorizationHeaderFormat, auth_token.c_str());
+}
+}  // namespace
+
 OAuth2ApiCallFlow::OAuth2ApiCallFlow(
     net::URLRequestContextGetter* context,
     const std::string& refresh_token,
     const std::string& access_token,
     const std::vector<std::string>& scopes)
     : context_(context),
       refresh_token_(refresh_token),
       access_token_(access_token),
       scopes_(scopes),
       state_(INITIAL),
@@ skipping 105 matching lines @@
   bool empty_body = body.empty();
   URLFetcher* result = URLFetcher::Create(
       0,
       CreateApiCallUrl(),
       empty_body ? URLFetcher::GET : URLFetcher::POST,
       this);
 
   result->SetRequestContext(context_);
   result->SetLoadFlags(net::LOAD_DO_NOT_SEND_COOKIES |
                        net::LOAD_DO_NOT_SAVE_COOKIES);
+  result->AddExtraRequestHeader(MakeAuthorizationHeader(access_token_));
 
   if (!empty_body)
     result->SetUploadData("application/x-www-form-urlencoded", body);
 
   return result;
 }