[rust-server] Restrict from_headers matches to the intended auth scheme - #24607

Merged

wing328 merged 5 commits into

OpenAPITools:masterfrom

twistali:fix/rust-server-untyped-from-headers-auth-bypass

Aug 8, 2026

Commits on Aug 4, 2026

[rust-server] Restrict from_headers matches to the intended auth scheme
twistali
committed
ddd272f

Commits on Aug 5, 2026

[rust-server] Add auth-scheme precedence tests for context.rs
twistali
committed
caa2250

Commits on Aug 6, 2026

[rust-server] Add a runtime test for a Basic block preceding a Bearer block
twistali
committed
bfd4aa0
[rust-server] Drop imports left unused by the scheme-restricted auth blocks
twistali
committed
97b9ef8
[rust-server] Allow the unreachable catch-all in the client auth match
twistali
committed
e4625a7