Remove headers from request attributes

2 files changed, 5 insertions, 1 deletions

diff --git a/oauthlib/common.py b/oauthlib/common.py
index c1180e6..6364761 100644
--- a/oauthlib/common.py
+++ b/oauthlib/common.py
@@ -426,7 +426,6 @@ class Request(object):
         }
         self._params.update(dict(urldecode(self.uri_query)))
         self._params.update(dict(self.decoded_body or []))
-        self._params.update(self.headers)
 
     def __getattr__(self, name):
         if name in self._params:
diff --git a/tests/test_common.py b/tests/test_common.py
index fb4bd5b..f239368 100644
--- a/tests/test_common.py
+++ b/tests/test_common.py
@@ -214,6 +214,11 @@ class RequestTest(TestCase):
         self.assertNotIn('bar', repr(r))
         self.assertIn('<SANITIZED>', repr(r))
 
+    def test_headers_params(self):
+        r = Request(URI, headers={'token': 'foobar'}, body='token=banana')
+        self.assertEqual(r.headers['token'], 'foobar')
+        self.assertEqual(r.token, 'banana')
+
 
 class CaseInsensitiveDictTest(TestCase):