1
53%
main: 53%

Ran 13 Jul 2026 09:18PM UTC

Files 706

Run time 19s

Badge

Embed ▾

Committed 13 Jul 2026 08:53PM UTC coverage: 52.246% (+0.03%) from 52.219%

Job # 29284199875.1

Build Type

push

github

Committed by

web-flow

Commit Message

fix(config): use proxy protocol for internal communication (#6516)

## Summary
The `identity` and `access` token options for the bearer token format
use an HTTP endpoint on the authenticate service to verify the validity
of tokens. When `use_proxy_protocol` is enabled that endpoint expects
requests to use the protocol. Unfortunately the internal HTTP client we
were using to make those requests wasn't making them with the proxy
protocol so they were being rejected.

This PR updates the code to wrap the HTTP transport making the requests
so that they are framed with the proxy protocol when the option is
enabled.

Two tests are added for this, but we should also add an acceptance test,
which will be done in a subsequent PR.

## Related issues
-
[ENG-4226](https://linear.app/pomerium/issue/ENG-4226/idp-access-token-bearer-auth-fails-under-use-proxy-protocol-true-all)
- #6503 

## AI disclosure
No AI was used for this PR.

## Checklist

- [x] reference any related issues
- [x] updated unit tests
- [x] add appropriate label (`enhancement`, `bug`, `breaking`,
`dependencies`, `ci`)
- [x] disclosed AI usage (or wrote "none") per AI_POLICY.md
- [x] ready for review

---------

Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>

Coverage Stats

37000 of 70819 relevant lines covered (52.25%)

461.02 hits per line

pomerium / pomerium / 29284199875 / 1
53%
main: 53%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 29284199875.1

pomerium / pomerium / 29284199875 / 1 53% main: 53%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 29284199875.1

pomerium / pomerium / 29284199875 / 1
53%
main: 53%

README BADGES
x