Steeltoe icon indicating copy to clipboard operation
Steeltoe copied to clipboard

Allow changing the header used for certificate auth

Open TimHess opened this issue 1 year ago • 0 comments

Steeltoe v4 defaults to using the header X-Client-Cert for sending and receiving certificates used for certificate authorization (thus effectively locking it in for authentication as well) without any ability to change the header name.

I think it is possible this could be changed in an application by configuring CertificateForwardingOptions and an HttpClient separately, but it would also be trivial to expose parameters to allow callers to set the value via the Steeltoe extensions linked above.

TimHess avatar Jun 25 '24 20:06 TimHess