BlockUnregisteredGateways is an Interceptor blocking calls from Gateways which were not registered on the cloud.

unary.MiddlewareHandler iterates through and calls all registered unary middleware interceptors and 'decorates' RPC parameters before invoking the original server RPC method.

SetIdentityFromContext finds Identity associated with caller's Client Certificate Serial Number (if present), makes sure that the found Identity is of a Gateway & fills in all available Gateway Identity information SetIdentityFromContext will bypass the Identity checks for local callers (other services on the cloud) and allowlisted RPCs (methods in identityDecoratorBypassList).

GW should start bootstrap 20 hours prior to cert expiration, give it 10 hours to try & start counting bootstrap failures after that.

Client Certificate CN Header.

Client Certificate Serial Number Header.

Interceptor defines an interface to be implemented by all Unary Interceptors In addition to a receiver form of InterceptorHandler it provides Name & Description methods to aid diagnostic & logging of Interceptor related issues.

InterceptorHandler is a function type to intercept the execution of a unary RPC on the server.