exact: /httpbin1
        principals:
        - andIds:
            ids:
            - any: true
      istio-ext-authz-ns[foo]-policy[httpbin-2]-rule[0]:
        permissions:
        - andRules:
            rules:
            - orRules:
                rules:
                - urlPath:
                    path:
                      exact: /httpbin2
        principals:
        - andIds:
            ids:

                      exact: /httpbin1
        principals:
        - andIds:
            ids:
            - any: true
      istio-ext-authz-ns[foo]-policy[httpbin-2]-rule[0]:
        permissions:
        - andRules:
            rules:
            - orRules:
                rules:
                - urlPath:
                    path:
                      exact: /httpbin2
        principals:
        - andIds:
            ids:

        permissions:
        - andRules:
            rules:
            - orRules:
                rules:
                - urlPath:
                    path:
                      exact: /another
        principals:
        - andIds:
            ids:
            - any: true
  shadowRules:
    policies:
      ns[foo]-policy[httpbin-1]-rule[0]:
        permissions:
        - andRules:
            rules:

        permissions:
        - andRules:
            rules:
            - orRules:
                rules:
                - urlPath:
                    path:
                      exact: /another
        principals:
        - andIds:
            ids:
            - any: true
  shadowRules:
    policies:
      ns[foo]-policy[httpbin-1]-rule[0]:
        permissions:
        - andRules:
            rules:

                      exact: /httpbin1
        principals:
        - andIds:
            ids:
            - any: true
      istio-ext-authz-ns[foo]-policy[httpbin-2]-rule[0]:
        permissions:
        - andRules:
            rules:
            - orRules:
                rules:
                - urlPath:
                    path:
                      exact: /httpbin2
        principals:
        - andIds:
            ids:

  namespace: foo
spec:
  action: DENY
  rules:
  - from:
    - source:
        principals: ["deny"]
---
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
  name: httpbin-allow
  namespace: foo
spec:
  action: ALLOW
  rules:
  - from:
    - source:

                      exact: /httpbin1
        principals:
        - andIds:
            ids:
            - any: true
      istio-ext-authz-ns[foo]-policy[httpbin-2]-rule[0]:
        permissions:
        - andRules:
            rules:
            - orRules:
                rules:
                - urlPath:
                    path:
                      exact: /httpbin2
        principals:
        - andIds:
            ids:

 */

package org.gradle.internal.resource.transport.http;

import org.apache.http.Header;
import org.apache.http.auth.Credentials;
import org.apache.http.message.BasicHeader;

import java.security.Principal;

public class HttpClientHttpHeaderCredentials implements Credentials {

    private final Header header;

    public HttpClientHttpHeaderCredentials(String name, String value) {

# release notes.
releaseNotes:
  - |
    **Fixed** an issue preventing the use of source principal based authorization at Istio Gateway when the Server's TLS mode is ISTIO_MUTUAL.

# securityNotes is a markdown listing of any changes related to the security of
# Istio.
securityNotes:
  - |
    __Source principal validation at Gateway does not work even with ISTIO_MUTUAL TLS mode__:

  val localPrincipal: Principal?
    get() = (localCertificates.firstOrNull() as? X509Certificate)?.subjectX500Principal

  @JvmName("-deprecated_localPrincipal")
  @Deprecated(
    message = "moved to val",
    replaceWith = ReplaceWith(expression = "localPrincipal"),
    level = DeprecationLevel.ERROR,
  )
  fun localPrincipal(): Principal? = localPrincipal

  override fun equals(other: Any?): Boolean {