pomerium / pomerium / 29284199875

53%

Build Type

push

github

Committed by web-flow

Commit Message

fix(config): use proxy protocol for internal communication (#6516)

## Summary
The `identity` and `access` token options for the bearer token format
use an HTTP endpoint on the authenticate service to verify the validity
of tokens. When `use_proxy_protocol` is enabled that endpoint expects
requests to use the protocol. Unfortunately the internal HTTP client we
were using to make those requests wasn't making them with the proxy
protocol so they were being rejected.

This PR updates the code to wrap the HTTP transport making the requests
so that they are framed with the proxy protocol when the option is
enabled.

Two tests are added for this, but we should also add an acceptance test,
which will be done in a subsequent PR.

## Related issues
-
[ENG-4226](https://linear.app/pomerium/issue/ENG-4226/idp-access-token-bearer-auth-fails-under-use-proxy-protocol-true-all)
- #6503 

## AI disclosure
No AI was used for this PR.

## Checklist

- [x] reference any related issues
- [x] updated unit tests
- [x] add appropriate label (`enhancement`, `bug`, `breaking`,
`dependencies`, `ci`)
- [x] disclosed AI usage (or wrote "none") per AI_POLICY.md
- [x] ready for review

---------

Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>

Coverage Stats

29 of 43 new or added lines in 3 files covered. (67.44%)

11 existing lines in 4 files now uncovered.

37000 of 70819 relevant lines covered (52.25%)

461.02 hits per line