From 548768008dfde644236d47d00d39348ce78fa945 Mon Sep 17 00:00:00 2001
From: Oskar Eichler <oskar@songstats.com>
Date: Sat, 5 Sep 2026 01:42:37 +0700
Subject: [PATCH] fix(android): clear custom headers between requests

---
 .changeset/quiet-ravens-reset.md                             | 5 +++++
 .../android/src/main/java/com/rnappauth/RNAppAuthModule.java | 4 ++++
 2 files changed, 9 insertions(+)
 create mode 100644 .changeset/quiet-ravens-reset.md

diff --git a/.changeset/quiet-ravens-reset.md b/.changeset/quiet-ravens-reset.md
new file mode 100644
index 000000000..5afa51bb4
--- /dev/null
+++ b/.changeset/quiet-ravens-reset.md
@@ -0,0 +1,5 @@
+---
+"react-native-app-auth": patch
+---
+
+Clear Android custom request headers before parsing each call so omitted header groups cannot reuse credentials from an earlier provider.
diff --git a/packages/react-native-app-auth/android/src/main/java/com/rnappauth/RNAppAuthModule.java b/packages/react-native-app-auth/android/src/main/java/com/rnappauth/RNAppAuthModule.java
index f1e955879..243ae1656 100644
--- a/packages/react-native-app-auth/android/src/main/java/com/rnappauth/RNAppAuthModule.java
+++ b/packages/react-native-app-auth/android/src/main/java/com/rnappauth/RNAppAuthModule.java
@@ -859,6 +859,10 @@ private void endSessionWithConfiguration(
     }
 
     private void parseHeaderMap(ReadableMap headerMap) {
+        registrationRequestHeaders = null;
+        authorizationRequestHeaders = null;
+        tokenRequestHeaders = null;
+
         if (headerMap == null) {
             return;
         }