update denied_response handling

Author: Pranjali-2501

internal/xds/bootstrap/bootstrap.go

@@ -190,10 +190,10 @@ type allowedGRPCServiceJSON struct {
 // allowedGRPCServicesEnabled reports whether any feature that consumes the
 // allowed_grpc_services field is enabled. Per gRFC A102 the field has no
 // dedicated env var; it is guarded by the env vars of its consuming features
-// (currently only ext_proc on the client; OR in ext_authz/RLQS guards as
+// (currently ext_proc and ext_authz on the client; OR in RLQS guards as
 // those features are implemented).
 func allowedGRPCServicesEnabled() bool {
-	return envconfig.XDSClientExtProcEnabled
+	return envconfig.XDSClientExtProcEnabled || envconfig.XDSClientExtAuthzEnabled
 }
 
 // AllowedGRPCServices maps a target URI to the credentials gRPC may use for

internal/xds/httpfilter/ext_authz/config.go

@@ -20,16 +20,16 @@ package extauthz
 
 import (
 	"google.golang.org/grpc/codes"
+	"google.golang.org/grpc/internal/xds/grpcservice"
 	"google.golang.org/grpc/internal/xds/httpfilter"
 	"google.golang.org/grpc/internal/xds/matcher"
-	"google.golang.org/grpc/internal/xds/xdsclient/xdsresource"
 )
 
 // config contains the configuration for the external authorization filter.
 type config struct {
 	httpfilter.FilterConfig
 	// grpcService is the configuration for the external authorization server.
-	grpcService xdsresource.GRPCServiceConfig
+	grpcService *grpcservice.Config
 	// filterEnabled specifies the percentage of requests to be authorized by
 	// the external authorization server.
 	filterEnabled fraction