override fun cancel() {
    call!!.cancel()
  }

  fun connect(client: OkHttpClient) {
    if (originalRequest.header("Sec-WebSocket-Extensions") != null) {
      failWebSocket(ProtocolException("Request header not permitted: 'Sec-WebSocket-Extensions'"))
      return
    }

    val webSocketClient =
      client
        .newBuilder()
        .eventListener(EventListener.NONE)

-external-identity-management.html for a tutorial on using these variables. oidc: enabled: false configUrl: "https://identity-provider-url/.well-known/openid-configuration" clientId: "minio" clientSecret: "" # Provide existing client secret from the Kubernetes Secret resource, existing secret will have priority over `clientId` and/or `clientSecret`` existingClientSecret: "" existingClientIdKey: "" existingClientSecret: "" claimName: "policy" scopes: "openid,profile,email" redirectUri: "https://c...

-external-identity-management.html for a tutorial on using these variables. oidc: enabled: false configUrl: "https://identity-provider-url/.well-known/openid-configuration" clientId: "minio" clientSecret: "" # Provide existing client secret from the Kubernetes Secret resource, existing secret will have priority over `clientId` and/or `clientSecret`` existingClientSecret: "" existingClientIdKey: "" existingClientSecret: "" claimName: "policy" scopes: "openid,profile,email" redirectUri: "https://c...

Tarayıcı daha sonra bu IP adresiyle **443 portu** (HTTPS portu) üzerinden iletişim kurar.

İletişimin ilk kısmı, client ile server arasında bağlantıyı kurmak ve hangi kriptografik anahtarların kullanılacağına karar vermek vb. içindir.

<img src="/img/deployment/https/https02.drawio.svg">

Client ile server arasındaki, TLS bağlantısını kurmaya yönelik bu etkileşime **TLS handshake** denir.

`HeroBase` ile aynı alanlara sahiptir ve ek olarak `secret_name` içerir.

Artık client’lar **yeni bir hero oluştururken** `secret_name` gönderecek; bu değer veritabanında saklanacak, ancak API response’larında client’a geri döndürülmeyecek.

/// tip | İpucu

**Password**’ları bu şekilde ele alırsınız: alırsınız ama API’de geri döndürmezsiniz.

			CertAuthority:     env.Get(certAuthorityEnv, kv.Get(target.NATSCertAuthority)),
			ClientCert:        env.Get(clientCertEnv, kv.Get(target.NATSClientCert)),
			ClientKey:         env.Get(clientKeyEnv, kv.Get(target.NATSClientKey)),
			Token:             env.Get(tokenEnv, kv.Get(target.NATSToken)),
			NKeySeed:          env.Get(nKeySeedEnv, kv.Get(target.NATSNKeySeed)),

### Client Binaries

filename | sha512 hash
-------- | -----------
[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.32.13/kubernetes-client-darwin-amd64.tar.gz) | 2c038815b7e589381d0581f533c2ec3bd2024549923518ad7335a1d37bedecce6982246932f58097b3cb30554683e6ffdddb155e3a16608e0854fafc70d6061e

	// S3 also supports the older SelectObjectContentRequest tag,
	// though it is no longer found in documentation. This is
	// checked and renamed below to allow older clients to also
	// work.
	if start.Name.Local == legacyXMLName {
		start.Name = xml.Name{Space: "", Local: "SelectRequest"}
	}

	// Make subtype to avoid recursive UnmarshalXML().
	type subS3Select S3Select

	if errors.As(err, &r) {
		return &r
	}
	return nil
}

type (
	// SingleHandlerFn is handlers for one to one requests.
	// A non-nil error value will be returned as RemoteErr(msg) to client.
	// No client information or cancellation (deadline) is available.
	// Include this in payload if needed.
	// Payload should be recycled with PutByteBuffer if not needed after the call.

Hier ist eine visuelle Darstellung, wie der **Proxy** weitergeleitete Header zwischen dem Client und dem **Anwendungsserver** hinzufügt:

```mermaid
sequenceDiagram
    participant Client
    participant Proxy as Proxy/Loadbalancer
    participant Server as FastAPI Server

    Client->>Proxy: HTTPS-Request<br/>Host: mysuperapp.com<br/>Pfad: /items

    Note over Proxy: Proxy fügt Forwarded-Header hinzu