oscerd opened a new pull request, #29820: URL: https://github.com/apache/camel/pull/29820
SPIFFE route authorization currently depends on a transport-specific Netty context. Add a transport-neutral TLS peer certificate provider on the Exchange and populate it from authenticated transport state in servlet/Jetty, Netty HTTP, Undertow and Vert.x platform HTTP consumers. A present provider is authoritative: unverified peers fail closed even when a legacy session header is present. The legacy Netty context fallback remains available when no provider is supplied. Forwarded certificate/identity headers do not establish verified TLS state. Includes the migration note, transport support documentation and regression coverage for verified/unverified peers plus the existing real-TLS Netty tests. Validation: all seven scoped module builds passed: core API/support, HTTP-common, Netty HTTP, Undertow, Vert.x platform HTTP and SPIFFE. Formatter/import sorting passed. Includes the real-TLS Netty tests. JIRA: https://issues.apache.org/jira/browse/CAMEL-26832 _Codex on behalf of oscerd_ Generated by Codex via OSS Helper -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
