[SECURITY] Add source IP validation for ignore-timeout fallback in session ticket auth#5457

Open

aiceflower wants to merge 3 commits into

apache:masterfrom

aiceflower:fix-source-ip-validation-for-auth-fallback

Commits on Jul 16, 2026

#AI COMMIT# [SECURITY] Add source IP validation for ignore-timeout cookie, remove cookie fallback from gateway
aiceflower
committed
#AI COMMIT# [SECURITY] Gate header-based internal RPC fallback behind source IP validation
aiceflower
committed
#AI COMMIT# Add unit tests for IP-validated ignore-timeout fallback
aiceflower
committed