How can we add Kerberos Authentication and OAuth at the same time on one proxy

[han-zhang]

Hi,

If we have a API proxy that needs both Kerberos Authentication and OAuth policy applied.

Currently, we see a conflict in the header

1. OAuth bearer token needs to be passed as Authorization header in the HTTP request

2. The SPENEGO negotiation header also needs to be passed as an Authrization header for Kerberos handshakes.

So its a conflict here as you can see

How can we resolve this? Any suggestions?

Thanks