Andrew Martinez fb2034245d fixes openziti/ziti#3356 adds www-authenticate headers (#3561) ...

* fixes openziti/ziti#3356 adds www-authenticate headers

- www-authenticate headers are returned on 401s from API requests
- www-authenticate headers are returned during authentication to signal
  addtional JWT bearer tokens needed (secondary ext jwt)
- adds support for additional headers on API errors
- adds SecurityTokenCtx for centralized security header processing
  (legacy, jwt, etc.)
- adds SecurityCtx for centralized identity, auth policy, MFA handling
- refactors existing JWT authentication methods (oidc, legacy) to use
  centralized processing where possible

2026-02-24 10:01:36 -05:00

..

api.go

Optimize imports

2026-01-28 15:01:35 -05:00

context.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

cors.go

Optimize imports

2026-01-28 15:01:35 -05:00

json_fields.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

responder.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

timeouts.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00