From 9ea64308cb274817314a14493b8d2b45a765ec9c Mon Sep 17 00:00:00 2001 From: Dave Syer Date: Wed, 2 Mar 2016 16:16:48 +0000 Subject: [PATCH] Add Authorize to sensitive headers in zuul proxy --- docs/src/main/asciidoc/spring-cloud-netflix.adoc | 2 +- .../cloud/netflix/zuul/filters/ZuulProperties.java | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/src/main/asciidoc/spring-cloud-netflix.adoc b/docs/src/main/asciidoc/spring-cloud-netflix.adoc index 226ee44c..117a63dd 100644 --- a/docs/src/main/asciidoc/spring-cloud-netflix.adoc +++ b/docs/src/main/asciidoc/spring-cloud-netflix.adoc @@ -1263,7 +1263,7 @@ route, e.g. routes: users: path: /myusers/** - sensitiveHeaders: Cookie,Set-Cookie + sensitiveHeaders: Cookie,Set-Cookie,Authorization url: https://dowstream ---- diff --git a/spring-cloud-netflix-core/src/main/java/org/springframework/cloud/netflix/zuul/filters/ZuulProperties.java b/spring-cloud-netflix-core/src/main/java/org/springframework/cloud/netflix/zuul/filters/ZuulProperties.java index 94ff90a2..0aa5ff29 100644 --- a/spring-cloud-netflix-core/src/main/java/org/springframework/cloud/netflix/zuul/filters/ZuulProperties.java +++ b/spring-cloud-netflix-core/src/main/java/org/springframework/cloud/netflix/zuul/filters/ZuulProperties.java @@ -123,7 +123,7 @@ public class ZuulProperties { private Boolean retryable; private Set sensitiveHeaders = new LinkedHashSet<>( - Arrays.asList("Cookie", "Set-Cookie")); + Arrays.asList("Cookie", "Set-Cookie", "Authorization")); public ZuulRoute(String text) { String location = null;