if !isTrustedAddress(remoteAddr, features.TrustedGatewayCIDR) {
		return nil, fmt.Errorf("caller from %s is not in the trusted network. XfccAuthenticator can not be used", remoteAddr)
	}

	return buildSecurityCaller(xfccHeader[0])
}

func buildSecurityCaller(xfccHeader string) (*security.Caller, error) {
	clientCerts, err := xfccparser.ParseXFCCHeader(xfccHeader)
	if err != nil {
		message := fmt.Sprintf("error in parsing xfcc header: %v", err)

// limitations under the License.

package authenticate

import (
	"testing"
)

func FuzzBuildSecurityCaller(f *testing.F) {
	f.Fuzz(func(t *testing.T, s string) {
		_, _ = buildSecurityCaller(s)
	})