Type Alias: GateAction

GateAction = "pass" | "allow" | "deny"

What the caller should do with a request, from gateRequest.

• pass - not tunnel traffic, or an open login route. Forward untouched.
• allow - tunnel traffic that is authorized. The request’s headers have ALREADY been rewritten (policy applied, identity injected, session cookie stripped), so forward it as it now stands.
• deny - tunnel traffic with no valid session. Answer 401 with AUTH_PREFIX as the login path.