Comma separated list of case-insensitive headers to copy from the authorization servers response to the request sent to the backend. If not set no headers are copied.
Example: Remote-User,Remote-Groups,Remote-Email,Remote-Name
Comma separated list of case-insensitive headers to copy from the authorization servers response to the response sent to the client. If not set no headers are copied.
Example: Set-Cookie,WWW-Authenticate
Comma separated list of case-insensitive headers to copy from the original request to the request made to the authorization server. If not set all headers are copied.
Recommendation: Generally it's recommended to leave this blank or use the below example for predictable results.
Example: Accept,X-Requested-With,Cookie,Authorization,Proxy-Authorization
Comma separated list of case-sensitive cookie names to copy from the original request to the request made to the authorization server. If not set all cookies are included. This allows omitting all cookies not required by the authorization server.
Example: authelia_session,another_session
Comma separated list of case-sensitive cookie names to exclude from the request made to the backend application. If not set no cookies are excluded. This allows omitting the cookie intended only for the authorization server.
Example: authelia_session,another_session