I would ask for an update of the basic auth in the SecurityPolicy to extract the username and add it to the headers sent to the backends.

The use case is the following, after user auth success I need to add the username in the request header that will be used by the application after.

This depends on the Envoy upstream PR: envoyproxy/envoy#32943