Request headers used

In order to make further decisions on request headers we decided to keep a list

These were found using git grep headers\\.get and looking at headers sent during a request normally (not done yet).

The links are indicative they will get out of date, but seemed worth doing.

notifications-utils

• x-forwarded-for

notifications-api

• X-Notify-User-Id
• User-Agent
• x-amz-cf-id Authorization

notifications-admin

• X-Forwarded-For

document-download-admin

Nothing found

document-download-api

• Authorization

Some other headers that are set that we might want for logging or are consumed by other parts of the infra

• :authority
• :method
• :path
• :scheme
• accept
• accept-encoding
• accept-language
• cache-control
• cookie
• priority
• referer
• sec-ch-ua
• sec-ch-ua-mobile
• sec-ch-ua-platform
• sec-fetch-dest
• sec-fetch-mode
• sec-fetch-site
• sec-fetch-user
• upgrade-insecure-requests
• user-agent