Remove networked content type state by properly passing auth token header

src/components/media-loader.js

 import { getBox, getScaleCoefficient } from "../utils/auto-box-collider";
 import { resolveMedia } from "../utils/media-utils";
 
-const fetchContentType = async url => fetch(url, { method: "HEAD" }).then(r => r.headers.get("content-type"));
+const fetchContentType = async (url, token) => {
+  const args = { method: "HEAD" };
+
+  if (token) {
+    args.headers = { Authorization: `Token ${token}` };
+  }
+
+  return fetch(url, args).then(r => r.headers.get("content-type"));
+};
 
 AFRAME.registerComponent("media-loader", {
   schema: {
     src: { type: "string" },
     token: { type: "string" },
-    contentType: { type: "string" },
     resize: { default: false }
   },
 
@@ -64,8 +71,7 @@ AFRAME.registerComponent("media-loader", {
       const { raw, origin, meta } = await resolveMedia(url);
       console.log("resolved", url, raw, origin, meta);
 
-      const contentType =
-        this.data.contentType || (meta && meta.expected_content_type) || (await fetchContentType(raw));
+      const contentType = (meta && meta.expected_content_type) || (await fetchContentType(raw, token));
       let blobUrl;
       if (token) {
         const response = await fetch(raw, {

src/utils/media-utils.js

@@ -45,9 +45,8 @@ export const addMedia = (src, resize = false) => {
     upload(src)
       .then(response => {
         const src = response.raw;
-        const contentType = response.meta.expected_content_type;
         const token = response.meta.access_token;
-        entity.setAttribute("media-loader", { src, contentType, token });
+        entity.setAttribute("media-loader", { src, token });
       })
       .catch(() => {
         entity.setAttribute("media-loader", { src: "error" });