[grpc]: fix ex_authz grpc client race condition

source/extensions/filters/http/ext_authz/config.cc

@@ -57,15 +57,15 @@ Http::FilterFactoryCb ExtAuthzFilterConfig::createFilterFactoryFromProtoTyped(
     };
   } else {
     // Envoy gRPC client.
-
-    Grpc::RawAsyncClientSharedPtr raw_client =
-        context.clusterManager().grpcAsyncClientManager().getOrCreateRawAsyncClient(
-            proto_config.grpc_service(), context.scope(), true, Grpc::CacheOption::AlwaysCache);
+
     const uint32_t timeout_ms =
         PROTOBUF_GET_MS_OR_DEFAULT(proto_config.grpc_service(), timeout, DefaultTimeout);
-    callback = [raw_client, filter_config, timeout_ms,
+    callback = [grpc_service = proto_config.grpc_service(), &context, filter_config, timeout_ms,
                 transport_api_version = Config::Utility::getAndCheckTransportVersion(proto_config)](
                    Http::FilterChainFactoryCallbacks& callbacks) {
+      Grpc::RawAsyncClientSharedPtr raw_client =
+          context.clusterManager().grpcAsyncClientManager().getOrCreateRawAsyncClient(
+              grpc_service, context.scope(), true, Grpc::CacheOption::AlwaysCache);
       auto client = std::make_unique<Filters::Common::ExtAuthz::GrpcClientImpl>(
           raw_client, std::chrono::milliseconds(timeout_ms), transport_api_version);
       callbacks.addStreamFilter(std::make_shared<Filter>(filter_config, std::move(client)));