Open
Description
RemoveRequestHeader if it doesn't exist in the config.
I would like to allow my clients are connecting to my backend via SCG and only send the headers to downstream from available to the configuration, otherwise remove it from the request.
RemoveRequestHeaderGatewayFilter
Using the RemoveRequestHeaderGatewayFilter is not ok, while the clients always send different key. All the key, that want to remove, it is consider to input or predefine in the config.
RemoveRequestHeaderIfNotExisted
Possible, if we could have a filter to remove all headers if there are doesn't exist in the config. So it is allows SCG to control the minimum request header to send to downstream services which good and enhance some security reason.
cloud:
gateway:
default-filters:
#Remove All the sensitive request headers (Cookie, Set-Cookie & Authorization) while passing request to downstream services
- RemoveRequestHeaderIfNotExisted=Cookie, Token, USER_ID, CHANNEL