Commit 9ea64308 by Dave Syer

Add Authorize to sensitive headers in zuul proxy

parent b8cbf4e6
...@@ -1263,7 +1263,7 @@ route, e.g. ...@@ -1263,7 +1263,7 @@ route, e.g.
routes: routes:
users: users:
path: /myusers/** path: /myusers/**
sensitiveHeaders: Cookie,Set-Cookie sensitiveHeaders: Cookie,Set-Cookie,Authorization
url: https://dowstream url: https://dowstream
---- ----
......
...@@ -123,7 +123,7 @@ public class ZuulProperties { ...@@ -123,7 +123,7 @@ public class ZuulProperties {
private Boolean retryable; private Boolean retryable;
private Set<String> sensitiveHeaders = new LinkedHashSet<>( private Set<String> sensitiveHeaders = new LinkedHashSet<>(
Arrays.asList("Cookie", "Set-Cookie")); Arrays.asList("Cookie", "Set-Cookie", "Authorization"));
public ZuulRoute(String text) { public ZuulRoute(String text) {
String location = null; String location = null;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment