Enumeration serviceRestIncomingAuthorizationHeaderHandling

The handling of Authorization headers for incoming REST connections. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is "drop". The allowed values and their meaning are:

"drop" - Do not attach the Authorization header to the message as a user property. This configuration is most secure.
"forward" - Forward the Authorization header, attaching it to the message as a user property in the same way as other headers. For best security, use the drop setting.
"legacy" - If the Authorization header was used for authentication to the broker, do not attach it to the message. If the Authorization header was not used for authentication to the broker, attach it to the message as a user property in the same way as other headers. For best security, use the drop setting.

Available since 2.19.