search

omniauth / omniauth_openid_connect

MIT License
170 stars 187 forks source link

https_proxy ignored for `token_endpoint` connections #189

Open Foorack opened 2 months ago

Foorack commented 2 months ago

I believe the Omniauth_openid_connect library bypasses https_proxy env variable when contacting e.g. token_endpoint.

Output of ::OpenIDConnect.http_client in Rails console show that Faraday is aware of the Proxy, and no "noproxy" sites are set.

stanhu commented 2 months ago

I think this gem just calls ::OpenIDConnect::Client.new(client_options), which ends up creating Rack::OAuth2.http_client: https://github.com/nov/rack-oauth2/blob/2aedad5d7bfd6b28d29075f3a1a7d411d11a378a/lib/rack/oauth2.rb#L44-L52

I'm not sure how https_proxy would be bypassed here.