mtlsAuthenticateXfcc

function mtlsAuthenticateXfcc(options?): AuthenticateFn;

Defined in: src/http/mtls.ts:149

Create an authenticate callback from Envoy x-forwarded-client-cert.

Parses the x-forwarded-client-cert header and extracts client identity. Does not require any crypto dependencies.

Warning: The reverse proxy MUST strip client-supplied x-forwarded-client-cert headers before forwarding.

Parameters

Parameter	Type
options?	{ domain?: string; selectElement?: "first" | "last"; validate?: XfccValidateFn; }
options.domain?	string
options.selectElement?	"first" | "last"
options.validate?	XfccValidateFn

Returns

AuthenticateFn