[QUESTION] UseCertificateAuthorization: Mismatch between documentation and behavior

[bart-vmware]

The UseCertificateAuthorization overload without parameters is documented as:

Sets ForwardedHeaders to <see cref="ForwardedHeaders.XForwardedProto" />.

But the implementation doesn't do so. It creates a new ForwardedHeadersOptions instance, whose ForwardedHeaders property defaults to None.

Either the code or the implementation is incorrect. What should it be?

[TimHess]

The documentation is perhaps overly simplified... Yes, this method does create a new ForwardedHeadersOptions where no headers are forwarded, but those options are passed straight into the other method which calls options.ForwardedHeaders |= ForwardedHeaders.XForwardedProto, so it is effectively correct.

[bart-vmware]

Ah yes, I missed that.