#pragma once

#include "envoy/stream_info/filter_state.h"

#include "absl/strings/str_join.h"

namespace Envoy {

namespace Network {

/**

 * SANs to validate certificate to set in the upstream connection. Filters can use this one to

 * override the SAN in TLS context.

 */

class UpstreamSubjectAltNames : public StreamInfo::FilterState::Object {

public:

  explicit UpstreamSubjectAltNames(const std::vector<std::string>& upstream_subject_alt_names)

  static const std::string& key();

private:

  const std::vector<std::string> upstream_subject_alt_names_;

};

} // namespace Network

} // namespace Envoy