io.helidon.security.providers.httpsign.SignedHeadersConfig.HeadersConfig

Description

Configuration of headers to be signed

Configuration options

KeyTypeDescription
alwaysList<String>Headers that must be signed (and signature validation or creation should fail if not signed or present)
if-presentList<String>Headers that must be signed if present in request
methodStringExact HTTP method this header configuration is bound to. Non-uppercase known HTTP methods also configure their uppercase names and log a warning; an explicit uppercase configuration takes precedence. Use uppercase names for known HTTP methods; this compatibility will be removed in a future major version. Custom methods retain exact case. If not present, it is considered default header configuration

See the manifest for all available types.

Copyright © 2018, 2026 Oracle and/or its affiliates.