← Back to plugin index

Whitelist HTTP Signature Headers
Description
Verifies that only the whitelisted signature headers are included in the signature.
Type name
HttpSignatureHeadersWhitelist
Class
com.airlock.iam.authentication.application.configuration.oneshot.HttpSignatureHeadersWhitelistConfig
May be used by
HTTP Signature Verification Credential Extractor
Properties
Allowed Signed Headers (allowedHttpSignatureHeaders)
Description
Defines which headers are allowed to be included in the signature. If the signature contains a header that is not whitelisted, the verification fails.
Attributes
Plugin-List
Mandatory
Assignable plugins
Request Target HTTP Signature Header String HTTP Signature Header
YAML Template (with default values) 

type: HttpSignatureHeadersWhitelist
id: HttpSignatureHeadersWhitelist-xxxxxx
displayName: 
comment: 
properties:
  allowedHttpSignatureHeaders: