Invert catch-all behavior for auth gateway

[awhdesmond]

Invert catch-all behavior in auth gateway to return HTTP 403 Forbidden by default.

[csieber]

thanks!

[Tobias-Pe]

Thanks!

[Tobias-Pe]

So which code should we return bc as you stated @awhdesmond the 403 will create a signin redirect.

404 doesn't seem as a bad option (first thought)

[awhdesmond]

So which code should we return bc as you stated @awhdesmond the 403 will create a signin redirect.

404 doesn't seem as a bad option (first thought)

What about catchall service return an unsued HTTP 4xx, gets intercepted by EnvoyFilter which then converts it back to HTTP 403?

[csieber]

What about catchall service return an unsued HTTP 4xx, gets intercepted by EnvoyFilter which then converts it back to HTTP 403?

I am in favor of the 404 because that feels like something a server should return if the path is not registered.

[Tobias-Pe]

What about catchall service return an unsued HTTP 4xx, gets intercepted by EnvoyFilter which then converts it back to HTTP 403?

I am in favor of the 404 because that feels like something a server should return if the path is not registered.

This would also help keep things straightforward.

The envoyfilter is a great option and very powerful but not as clear when it comes to trying to follow what is happening. So we should keep our filter usage minimal

[Tobias-Pe]

Thank you Desmond !