Upstream Authorization Cookie

[gambol99]

• adding an option to stop the proxy from including the authorization cookies in the upstream request

so disabling all authorization tokens would mean specifying --enable-authorization-cookies=false --enable-authorization-header=false --enable-token-header=false ..

TODO: add shortcut to disable all three

$ bin/keycloak-proxy --config config.yml --enable-authorization-cookies=false --enable-authorization-header=false --enable-token-header=false
...
[jest@starfury keycloak-proxy]$ nc -l 127.0.0.1 8080
GET / HTTP/1.1
Host: 127.0.0.1:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Cache-Control: max-age=0
Cookie: event_filter=merged; seen_cookie_message=yes; sidebar_collapsed=false; kc-access=censored
Upgrade-Insecure-Requests: 1
X-Auth-Email: [email protected]
[email protected]
X-Auth-Expiresin: 2017-11-18 16:50:12 +0000 UTC
X-Auth-Family-Name: Jayawardene
X-Auth-Given-Name: Rohith
X-Auth-Name: Rohith Jayawardene
X-Auth-Roles: broker:uma_protection,broker:admin-user,broker:devops-user
X-Auth-Subject: ID
X-Auth-Userid: [email protected]
X-Auth-Username: [email protected]
X-Forwarded-For: 127.0.0.1
X-Forwarded-Host: 127.0.0.1:8080
X-Forwarded-Proto: 
Accept-Encoding: gzip
Connection: close