feat: add and whitelist X-Consumer-* zalando proprietary headers #594

related to zalando/restful-api-guidelines#594
zalando · Jul 22, 2020 · de71608 · de71608
1 parent f58ab4e
commit de71608
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/server/zally-ruleset-zalando/src/main/resources/reference.conf b/server/zally-ruleset-zalando/src/main/resources/reference.conf
@@ -3,7 +3,7 @@
 HttpHeadersRule {
   whitelist: [ETag, TSV, TE, Content-MD5, DNT, X-ATT-DeviceId, X-UIDH, X-Request-ID, X-Correlation-ID,
     WWW-Authenticate, X-XSS-Protection, X-Flow-ID, X-UID, X-Tenant-ID, X-Device-OS, X-Trace-ID,
-    X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset]
+    X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset, X-Consumer, X-Consumer-Signature, X-Consumer-Key-ID]
 }
 
 LimitNumberOfResourcesRule {
@@ -198,7 +198,10 @@ ProprietaryHeadersRule {
     "X-Mobile-Advertising-ID",
     "X-RateLimit-Limit",
     "X-RateLimit-Remaining",
-    "X-RateLimit-Reset"
+    "X-RateLimit-Reset",
+    "X-Consumer",
+    "X-Consumer-Signature",
+    "X-Consumer-Key-ID"
   ]
 }