feat(proxy-backend): limit the forwarded http headers to a safe set

2020-10-08 14:12:23 +02:00
parent 4922f1dff9
commit 9226c2aaa0
7 changed files with 256 additions and 4 deletions
@@ -0,0 +1,15 @@
+---
+'@backstage/plugin-proxy-backend': minor
+---
+
+Limit the http headers that are forwarded from the request to a safe set of defaults.
+A user can configure additional headers that should be forwarded if the specific applications needs that.
+
+```yaml
+proxy:
+  '/my-api':
+    target: 'https://my-api.com/get'
+    allowedHeaders:
+      # We need to forward the Authorization header that was provided by the caller
+      - Authorization
+```