Why HTTP authorization headers are not being set for all requests?

HTTP authorization headers are not set for some Bold Reports® Report Viewer and Report Designer requests in ASP.NET Core and ASP.NET MVC applications. Report export requests use a form post action, and image rendering requests use the HTML image src attribute, so these requests cannot pass headers. The following table lists each request.

Report Action Action Name Request type Component Headers Comments
Report Rendering PostReportAction POST Report Viewer, Report Designer Yes No
Report Exporting (ASP.NET MVC) PostReportAction POST Report Viewer, Report Designer No

This request is to download the exporting document from Report Viewer and Report Designer applications with Form post action. So, the request headers cannot be passed with this action. For security details, see Resolve the image render and export issue with ASP.NET MVC authentication.
Report Exporting (ASP.NET Core) PostFormReportAction POST Report Viewer, Report Designer No

This request is to download the exporting document from Report Viewer and Report Designer applications with Form post action. So, the request headers cannot be passed with this action. For security details, see Resolve the image render and export issue with ASP.NET Core authentication.
Image Rendering Get Resource GET Report Viewer, Report Designer No

This request is to render the image items with Report Viewer and Report Designer applications. This request URL is used with the HTML image src attribute, so you cannot add additional headers for this request. For details, see Resolve the image render and export issue with ASP.NET MVC authentication.
Report Designing PostDesignerAction POST Report Designer Yes No
Report Save (ASP.NET MVC) PostDesignerAction POST Report Designer No This request method is used for the download process (save the report in the device), upload process (open the report from the device), and add an image (open the image from the device). You cannot use further to get the data from the server.
Report Save (ASP.NET Core) PostFormDesignerAction POST Report Designer No This request method is used for the download process (save the report in the device), upload process (open the report from the device), and add an image (open the image from the device). You cannot use further to get the data from the server.
Open Report and Add image UploadReportAction POST Report Designer Yes No
Image Manager Images Reporting GetImage GET Report Designer No

This request is to render the image items with Report Viewer and Report Designer applications. This request URL is used with the HTML image src attribute, so you cannot add additional headers for this request. For details, see Resolve the image render and export issue with ASP.NET MVC authentication.