only support loading idp tokens via bearer tokens (#5546)

only support loading idp tokens via bearer tokens (#5545)

Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
This commit is contained in:
backport-actions-token[bot] 2025-03-26 09:52:00 -06:00 committed by GitHub
parent 618ab8fe3f
commit c0848eecfe
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
5 changed files with 12 additions and 73 deletions

View file

@ -21,9 +21,7 @@ const (
// HeaderPomeriumAuthorization is the header key for a pomerium authorization JWT. It
// can be used in place of the standard authorization header if that header is being
// used by upstream applications.
HeaderPomeriumAuthorization = "x-pomerium-authorization"
HeaderPomeriumIDPAccessToken = "x-pomerium-idp-access-token" //nolint: gosec
HeaderPomeriumIDPIdentityToken = "x-pomerium-idp-identity-token" //nolint: gosec
HeaderPomeriumAuthorization = "x-pomerium-authorization"
// HeaderPomeriumResponse is set when pomerium itself creates a response,
// as opposed to the upstream application and can be used to distinguish
// between an application error, and a pomerium related error when debugging.