Setting an HTTP(S) proxy on the DuoOIDC health check

[Christopher Bongaarts]

On 3/20/2024 8:25 AM, Cantor, Scott wrote:
>> Probably creating a custom HttpClient(Factory) bean somewhere?
> With the appropriate bean name documented [1] to override the one used by the plugin. The HttpClientConfiguration page links to the relevant javadoc and the base class includes all of the properties that are controllable, proxying included.

Thanks; with those hints and lots of source code reading, this addition 
to duo-oidc-authn-config.xml did the trick (for IdP 4.1.7+DuoOIDC 1.1.1):

   <bean id="shibboleth.authn.DuoOIDC.nimbus.HttpClient"
parent="shibboleth.authn.DuoOIDC.nimbus.InternalHttpClient"
            p:connectionProxyHost="REDACTED.umn.edu"
            p:connectionProxyPort="12345" />


-- 
%%  Christopher A. Bongaarts   %%cab at umn.edu           %%
%%  OIT - Identity Management  %%http://umn.edu/~cab   %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240320/aa3055b9/attachment.htm>