Hi, is there a way to configure what header is rea...
# pact-broker
m
Hi, is there a way to configure what header is read for basic authorization? We would love if there is an environment variable for this… We are behind a gateway that is renaming our
Authorization
header. We are using the pact-broker container.
m
No, basic auth is an RFC standard. if you have auth on the gateway, why not do auth there?
m
basic isn’t one of the options 🙂
m
Why do you have auth on the gateway?
I guess I'm saying, if you're adding another auth layer how will all of the pact client tooling know how to send two different authentication headers?
Is basic with required if you have gateway auth? You could implement a custom auth layer that has basic rules in place, and then just disable basic auth on the broker?
If security like this is important, you might want to look at Pactflow which has proper security, user management and RBAC. We have a cloud and on prem version