Module forward_auth 

Forward-authentication plugin (forward-auth).

Delegates the access decision for each request to an external HTTP authorization service. The plugin issues a callout carrying the original request’s forwarding metadata (X-Forwarded-*) plus any configured client headers; a 2xx reply lets the request continue (optionally copying selected auth-response headers onto the request forwarded upstream), while a non-2xx reply denies the request (exits on the denied port), mirroring the auth service’s status/body/headers back to the client. A callout failure either degrades open (success) or exits on the error port with a configurable status, depending on allow_degradation — it is a genuine infrastructure failure, not a deliberate denial.

Ports the APISIX forward-auth plugin onto featherbit’s shared outbound HTTP client.

Structs

ForwardAuthPlugin

Sends each request to an external authorization endpoint and routes on its verdict: 2xx continues (success port), non-2xx denies (denied port), and a (non-degrading) callout failure is a genuine infra failure (error port).