[TEC-3472] Add client authorization by session_id

[texpert]

Pass the Flow Session id in the authorization header when syncing orders to flow.io

[paololim]

Hello @texpert - Thank you for the PR! We really appreciate the input, and recognize this is a lacking feature in our Ruby SDK.

Please note that the file lib/flow_commerce/flow_api_v0_client.rb is actually an auto-generated Ruby client by apibuilder. This is a tool we use to document our REST APIs at Flow, and generate clients across multiple languages and platforms. Manually altering this file would mean possible loss of these changes when we deploy new versions of this project.

The Ruby generator currently does not support auth schemes other than basic auth. Feel free to add an issue directly to https://github.com/apicollective/apibuilder-generator

In the meantime, a possible way around this is to override/monkeypatch Io::Flow::V0::HttpClient::Request, similar to what you did, but not on the generated file itself. This will ensure a manually created session auth will be reusable even if the file is replaced with a newly generated version.

Another way around this it to manually pass Authorization in the default_headers hash, while passing in no authorization, eg:

flow_client_with_session_auth = ::Io::Flow::V0::Client.new(
    default_headers: { "Authorization": "session XXXXXXXXXXXXX", "Other-Header": "YYYYYYYYYYY" },
    authorization: nil
)

[texpert]

Hello, @paololim!

Thank you for review and advise!

Meanwhile, I have opened a PR to the apibuilder-generator, please, review:

apicollective/apibuilder-generator#624

If it will happen to be acceptable, then the lib/flow_commerce/flow_api_v0_client.rb changes could be removed from the current PR, leaving only the changes to lib/flow_commerce/client.rb