Inbound
Cookie, Authorization and X-Forwarded-* headers are not passed through. Set them here if your endpoint needs them. See Destination rules.Order of headers
- The headers of the incoming request, except
Cookie,Authorization,X-Forwarded-*and the other headers listed in Destination rules. - Extra headers. They replace an incoming header with the same name.
X-Hooksnode-Source-Id.X-Hooksnode-Signature. It is always last, so an extra header cannot forge it.
Rules
These names are refused:
Host, Content-Length, Transfer-Encoding, Connection, Upgrade, Keep-Alive, TE, Trailer, Proxy-Authenticate, Proxy-Authorization and X-Hooksnode-Signature.
Save {} to remove all extra headers.