Filter the response headers in the proxy backend

2020-11-27 12:59:57 +01:00
parent 7aa0830abb
commit 6a6c7c14ea
4 changed files with 108 additions and 4 deletions
@@ -0,0 +1,7 @@
+---
+'@backstage/plugin-proxy-backend': patch
+---
+
+Filter the headers that are sent from the proxied-targed back to the frontend to not forwarded unwanted authentication or
+monitoring contexts from other origins (like `Set-Cookie` with e.g. a google analytics context). The implementation reuses
+the `allowedHeaders` configuration that now controls both directions `frontend->target` and `target->frontend`.