Completely disable Teleport-Jwt-Assertion header?

[uedvt359]

I'm trying to proxy a WebApp that has very strict header length restrictions. Even when setting jwt_claims: none, the Teleport-Jwt-Assertion is still too long, and the webapp returns a http/500 error.

Is there a way to completely disable sending this header? I tried to create a header override rule, but it gets ignored:

spec:
  rewrite:
    headers:
    - name: Teleport-Jwt-Assertion
      value: ""  ## does not work, still sends the original header
    jwt_claims: none

[webvictim]

There isn't a way to disable sending the header completely. If you wanted, you could comment out/remove the code that adds the header, then recompile Teleport:

teleport/lib/srv/app/transport.go

Lines 180 to 181 in c6a5f26

	// Add in JWT headers.
	r.Header.Set(teleport.AppJWTHeader, c.jwt)

[uedvt359]

thanks for the info. another option would be to relax the IsReservedHeader check, allowing those header to be overwritten with an empty string.

for now, i'll stick to my workaround, where i'm running nginx as a reverse-proxy for this webapp (on my teleport machine), removing the header.