Problem Statement

There are users who would like to secure the http port exported by the vitess servers with TLS. However, some of the health check and monitoring URLs (like /debug/vars) still need to be accessed without TLS. For example, Kubernetes prefers the health check URLs to not require TLS.

We require the ability to specify a separate (optional) TLS http port, and the ability to s

Is your feature request related to a problem? Please describe.
First off: Thanks for creating this library!
Because I want to create an application which native clients should authenticate from, it'd be very important for the security to have the PKCE extension included. (The latest OAuth Security BCP now recommends using PKCE also for server-side apps, as it provides some additional benefit