policy: add new certificate-authority option for downstream mTLS client certificates (#1835)

* policy: add new certificate-authority option for downstream mTLS client certificates

* update proto, docs
This commit is contained in:
Caleb Doxsey 2021-02-01 08:10:32 -07:00 committed by GitHub
parent 8e3404e7be
commit cc85ea601d
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
15 changed files with 490 additions and 406 deletions

View file

@ -497,7 +497,7 @@ func TestProxy_ProgrammaticCallback(t *testing.T) {
}
func TestProxy_jwt(t *testing.T) {
// without downstream headers being set
// without upstream headers being set
req, _ := http.NewRequest("GET", "https://www.example.com/.pomerium/jwt", nil)
w := httptest.NewRecorder()
@ -509,7 +509,7 @@ func TestProxy_jwt(t *testing.T) {
return
}
// with downstream request headers being set
// with upstream request headers being set
req, _ = http.NewRequest("GET", "https://www.example.com/.pomerium/jwt", nil)
w = httptest.NewRecorder()
req.Header.Set(httputil.HeaderPomeriumJWTAssertion, "MOCK_JWT")