This sort of thing is why it's nice to have authz throughout your environment. A client request that gets incorrectly forwarded to a proxy should be rejected by

This sort of thing is why it's nice to have authz throughout your environment. A client request that gets incorrectly forwarded to a proxy should be rejected by the downstream service. The problem is that people keep all of their authn/authz at the boundary and then, once you're past that, it's a free for all. Every service needs to validate authorization of the request.