fix: Remove auth when cross origin redirect (box/box-codegen#648) (#488)

Author: box-sdk-build

.codegen.json

@@ -1 +1 @@
-{ "engineHash": "6f803a2", "specHash": "091b558", "version": "1.10.0" }
+{ "engineHash": "b5ed925", "specHash": "091b558", "version": "1.10.0" }

package-lock.json

@@ -232,8 +232,13 @@ export class BoxNetworkClient implements NetworkClient {
           message: `Unable to follow redirect for ${fetchOptions.url}`,
         });
       }
+      const sameOrigin =
+        new URL(fetchResponse.headers['location']).origin ===
+        new URL(fetchOptions.url).origin;
       return this.fetch({
         ...options,
+        params: undefined,
+        auth: sameOrigin ? fetchOptions.auth : undefined,
         url: fetchResponse.headers['location'],
       });
     }