abhinav-phi commented on PR #14159:
URL: https://github.com/apache/apisix/pull/14159#issuecomment-6690956464
all three points are addressed in 17ca666:
1. the 200-response block now shows `headers="@request-target date digest"`,
matching the request.
2. the 401 example now sends `{"name": "tampered"}`, so the body no longer
matches the signed digest and the request genuinely fails validation with a 401.
3. `signed_headers: ["date", "digest"]` is now in all four route
configuration examples (Admin API, ADC, and both Ingress variants), so the
digest is a required signed header for the route, not just something the
example client happens to send.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
