From 0fbd864b8c1d3b90f7b41406ccb06f2f22270ef7 Mon Sep 17 00:00:00 2001
From: Praneeth Bajjuri <pbajjuri@redhat.com>
Date: Tue, 21 Nov 2023 11:50:18 -0600
Subject: [PATCH] added the extra parameters to the HTTP (#638)

Co-authored-by: Praneeth Bajjuri <pbajjuri@pbajjuri.remote.csb>
---
 .../security/authorization/ext_auth_test.go   | 52 ++++++++++++++-----
 1 file changed, 40 insertions(+), 12 deletions(-)

diff --git a/pkg/tests/tasks/security/authorization/ext_auth_test.go b/pkg/tests/tasks/security/authorization/ext_auth_test.go
index 61b3dff7..c6aa0b7f 100644
--- a/pkg/tests/tasks/security/authorization/ext_auth_test.go
+++ b/pkg/tests/tasks/security/authorization/ext_auth_test.go
@@ -60,12 +60,26 @@ spec:
   techPreview:
     meshConfig:
       extensionProviders:
-      - name: sample-ext-authz-http
-        envoyExtAuthzHttp:
-          includeRequestHeadersInCheck:
-          - x-ext-authz
-          port: "8000"
-          service: ext-authz.foo.svc.cluster.local`)
+        - name: sample-ext-authz-http
+          envoyExtAuthzHttp:
+            headersToDownstreamOnDeny:
+              - set-cookie
+              - location
+            headersToDownstreamOnAllow:
+              - set-cookie
+              - location
+            headersToUpstreamOnAllow:
+              - location
+              - email
+              - authorization
+              - path
+              - x-auth-request-user
+              - x-auth-request-email
+              - x-auth-request-access-token
+            includeRequestHeadersInCheck:
+              - x-ext-authz
+            port: "8000"
+            service: ext-authz.foo.svc.cluster.local`)
 
 			t.Cleanup(func() {
 				oc.Patch(t, meshNamespace, "smcp", smcpName, "json",
@@ -77,12 +91,26 @@ spec:
 spec:
   meshConfig:
     extensionProviders:
-    - name: sample-ext-authz-http
-      envoyExtAuthzHttp:
-        includeRequestHeadersInCheck:
-        - x-ext-authz
-        port: 8000
-        service: ext-authz.foo.svc.cluster.local`)
+      - name: sample-ext-authz-http
+        envoyExtAuthzHttp:
+          headersToDownstreamOnDeny:
+            - set-cookie
+            - location
+          headersToDownstreamOnAllow:
+            - set-cookie
+            - location
+          headersToUpstreamOnAllow:
+            - location
+            - email
+            - authorization
+            - path
+            - x-auth-request-user
+            - x-auth-request-email
+            - x-auth-request-access-token
+          includeRequestHeadersInCheck:
+            - x-ext-authz
+          port: 8000
+          service: ext-authz.foo.svc.cluster.local`)
 
 			t.Cleanup(func() {
 				oc.Patch(t, meshNamespace, "smcp", smcpName, "json",