nodeattestor

const (
	// This header contains the value of the gRPC :authority pseudo-header as received from the client.
	// Warning: This value is set by the client and is not authenticated or validated by SPIRE.
	// It must not be used for security decisions (such as authentication, authorization, or trust domain selection) in attestor plugins without threat assessment.
	// Valid uses include diagnostics, logging, or configuration side-loading
	XForwardedHostKey = "X-Untrusted-Forwarded-Host"

	// XForwardedClientIPKey is the metadata key for the client IP address observed by the server.
	// Note: This reflects the immediate connecting peer, and may not represent the true client origin
	// in scenarios including load balancers and other middlebox patterns
	XForwardedClientIPKey = "X-Forwarded-Client-IP"
)