servers.http.populate-aaa-headers

populate_aaa_headers

Control automatic AAA metadata headers on responses from an HTTP or HTTPS server listener.

servers {
    http "API" {
        listen { protocol tcp; addr "127.0.0.1:8080"; }
        clients "HTTP_CLIENTS";
        populate_aaa_headers false;
    }
}

Default: true.

When enabled, responses prepared by an AAA policy include X-AAA-Context-Id and X-AAA-Result. X-AAA-Message is included when the policy result has a message. These headers describe the policy outcome regardless of whether it called an authentication backend.

Set false to stop generating these headers automatically. Explicit response headers and default_headers can also set these headers. The setting does not change response bodies or status codes. Early server-generated errors that bypass AAA policy execution do not generate AAA metadata.