OAuth Bug

[mitchklusty]

Hi. I'm working with a DSA instance trying to make OAuth work as the authentication system of the site. I previously had an issue that prevented login with OAuth at all, but it was fixed here #3505. I have found another issue with this that I would like some help addressing.

The EventStream system does not work properly with OAuth. When logged in through the standard login procedure, the request to "/notification/stream" includes a "Cookie" header that contains the girderToken, so the stream works. When the user has logged in with OAuth, this header is not set, so the stream fails and returns a 401 error for every request on the stream.

I am looking at ways to set this header, but any help on the best way to go about fixing this would be appreciated.