SpiffeX509HeaderProviderOptions
Defined in: src/http/spiffe.ts:387
Configuration for a generic trusted-proxy X.509-SVID header provider.
Properties
Section titled “Properties”chainVerifiedHeader
Section titled “chainVerifiedHeader”readonly chainVerifiedHeader: string;Defined in: src/http/spiffe.ts:395
Header proving that the proxy successfully verified the certificate chain.
chainVerifiedValue?
Section titled “chainVerifiedValue?”readonly optional chainVerifiedValue?: string;Defined in: src/http/spiffe.ts:397
Required value of chainVerifiedHeader; defaults to true.
header?
Section titled “header?”readonly optional header?: string;Defined in: src/http/spiffe.ts:393
Header carrying the percent-encoded PEM leaf certificate.
maxHeaderBytes?
Section titled “maxHeaderBytes?”readonly optional maxHeaderBytes?: number;Defined in: src/http/spiffe.ts:399
Maximum encoded certificate-header size.
trustDomains
Section titled “trustDomains”readonly trustDomains: Iterable<string>;Defined in: src/http/spiffe.ts:389
SPIFFE trust domains accepted from validated workload IDs.
trustedProxyAddresses
Section titled “trustedProxyAddresses”readonly trustedProxyAddresses: Iterable<string>;Defined in: src/http/spiffe.ts:391
Exact normalized proxy IP literals permitted to assert evidence.