OIDC issuer behind a proxy cannot be accessed

Fixes gristlabs#942
tristanrobert · Jan 6, 2025 · 3025f07 · 3025f07
1 parent 546feb5
commit 3025f07
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/app/server/lib/OIDCConfig.ts b/app/server/lib/OIDCConfig.ts
@@ -80,6 +80,7 @@ import { StringUnionError } from 'app/common/StringUnion';
 import { EnabledProtection, EnabledProtectionString, ProtectionsManager } from './oidc/Protections';
 import { SessionObj } from './BrowserSession';
 import { getOriginUrl } from './requestUtils';
+import { proxyAgent } from './ProxyAgent';
 
 const CALLBACK_URL = '/oauth2/callback';
 
@@ -181,6 +182,7 @@ export class OIDCConfig {
 
     this._redirectUrl = new URL(CALLBACK_URL, spHost).href;
     custom.setHttpOptionsDefaults({
+      agent: issuerUrl !== undefined ? proxyAgent(new URL(issuerUrl)) : undefined,
       ...(httpTimeout !== undefined ? {timeout: httpTimeout} : {}),
     });
     await this._initClient({ issuerUrl, clientId, clientSecret, extraMetadata });