WebClient proxy configuration not working with oAuth2

Question

I have implemented webclient and oAuth2 with grant type Client Credentials. I must use proxy to access bureau. But webclient is not using the host which I have configured.

HttpClient httpClient = HttpClient.create()
.tcpConfiguration(tcpClient -> tcpClient.option(ChannelOption.CONNECT_TIMEOUT_MILLIS, connectionTimeout)
.doOnConnected(conn -> conn.addHandlerLast(new ReadTimeoutHandler(readTimeout, TimeUnit.MILLISECONDS)))
.proxy(proxy -> proxy.type(ProxyProvider.Proxy.HTTP).host(proxyHost).port(proxyPort)));

its working fine if I configure proxy with system :

System.setProperty("proxyHost", "host);
System.setProperty("proxyPort", "8080");

But I can't use System property over the cloud. Please suggest me some work around or any solution.

I am getting below exception: "org.springframework.security.oauth2.core.OAuth2AuthorizationException: [invalid_token_response] An error occurred while attempting to retrieve the OAuth 2.0 Access Token Response: I/O error on POST request for \"https://tokenURL": api.uat.equifax.com; nested exception is java.net.UnknownHostException: resourseURL\r\n\tat org.springframework.security.oauth2.client.endpoint.DefaultClientCredentialsTokenResponseClient.getTokenResponse(DefaultClientCredentialsTokenResponseClient.java:79)\r\n\tat ..."

the error msg is quite clear, Unknown host "tokenURL" that doesn't look like a valid hostname to me "host doesn't look valid — Toerktumlare
– Toerktumlare, Commented Dec 3, 2019 at 12:01
Thanks for your response Adolf, actually in my code I am using actual hostname but due to some security reason I am not pasting it over here. proxy.type(ProxyProvider.Proxy.HTTP).host(proxyHost).port(proxyPort)) — pawan kumar
– pawan kumar, Commented Dec 3, 2019 at 18:57
well as i said before, the error msg is quite clear, UnknownHostException — Toerktumlare
– Toerktumlare, Commented Dec 3, 2019 at 20:59
Yes you are right Adolf but I don't get this unknownHostException when I set the proxies by using System.setProperty as mentioned above. I do not want to set the proxies with System and I want to follow the conventional approach by setting the proxies with HttpClient alone. When we do this I get UnknownhostException. Suggest me some work around or any fix if possible. — pawan kumar
– pawan kumar, Commented Dec 4, 2019 at 11:45
my suggestion is to debug the application/source code and check what value actually is there when it throws the exception. Since the error does not lie in the code you have posted. — Toerktumlare
– Toerktumlare, Commented Dec 4, 2019 at 11:53

Max · Accepted Answer · 2021-01-19 11:22:58Z

2

Old question but it was still the first stackoverflow entry we found so we decided to document our solution.

We stumbled across the same problem. The exception OAuth2AuthorizationException indicates that the problem occurs during the authorization request. After some digging in the spring-security-oauth2-client sources, we found out that the authorization request is using a different client than the resource request. You only set the proxy for the resource client.

The authorization request is using a RestTemplate. The following code snippet shows how we created a custom RestTemplate that is using a proxy and added it to our OAuth2AuthorizedClientManager.

@Bean 
public OAuth2AuthorizedClientManager authorizedClientManager( 
    final ClientRegistrationRepository clientRegistrationRepository, 
    final OAuth2AuthorizedClientService authorizedClientService) { 
 
    // Create RestTemplate that will be used for the authorization request
    // It's mandatory to add FormHttpMessageConverter and OAuth2AccessTokenResponseHttpMessageConverter
    // See javadoc from DefaultClientCredentialsTokenResponseClient.setRestOperations(RestOperations restOperations)
    // for further information
    RestTemplate restTemplate = new RestTemplate( 
        Arrays.asList(new FormHttpMessageConverter(), new OAuth2AccessTokenResponseHttpMessageConverter())); 
    restTemplate.setErrorHandler(new OAuth2ErrorResponseErrorHandler()); 
 
 
    // set up proxy for RestTemplate
    final HttpClientBuilder clientBuilder = HttpClientBuilder.create(); 
    clientBuilder.useSystemProperties(); 
    clientBuilder.setProxy(new HttpHost(proxyConfigDO.getHost(), proxyConfigDO.getPort())); 
 
    final CredentialsProvider credsProvider = new BasicCredentialsProvider(); 
    credsProvider.setCredentials( 
        new AuthScope(proxyConfigDO.getHost(), proxyConfigDO.getPort()), 
        new UsernamePasswordCredentials(proxyConfigDO.getUser(), proxyConfigDO.getPassword())); 
    clientBuilder.setDefaultCredentialsProvider(credsProvider); 
    clientBuilder.setProxyAuthenticationStrategy(new ProxyAuthenticationStrategy()); 
 
    final CloseableHttpClient client = clientBuilder.build(); 
    final HttpComponentsClientHttpRequestFactory factory = new HttpComponentsClientHttpRequestFactory(); 
    factory.setHttpClient(client); 
 
    restTemplate.setRequestFactory(new BufferingClientHttpRequestFactory(factory)); 
 
    // Create new client and pass our custom resttemplate 
    final var tokenResponseClient = new DefaultClientCredentialsTokenResponseClient(); 
    tokenResponseClient.setRestOperations(restTemplate); 
 
    // Create ClientCredentialsOAuth2AuthorizedClientProvider and override default setAccessTokenResponseClient
    // with the one we created in this method
    final var authorizedClientProvider = new ClientCredentialsOAuth2AuthorizedClientProvider(); 
    authorizedClientProvider.setAccessTokenResponseClient(tokenResponseClient); 
 
    final var authorizedClientManager = 
        new AuthorizedClientServiceOAuth2AuthorizedClientManager( 
            clientRegistrationRepository, authorizedClientService); 
    authorizedClientManager.setAuthorizedClientProvider(authorizedClientProvider); 
 
    return authorizedClientManager; 
}

answered Jan 19, 2021 at 11:22

Max

212 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Purfakt Over a year ago

Hey Max, thanks for sharing this. When I try your solution, I get the message:

a bean of type 'org.springframework.security.oauth2.client.registration.ClientRegistrationRepository' that could not be found.

I feel so close to the solution, but I do not understand why this bean is not created by spring based on my configuration (with the spring.security.oauth2.client.registration set). Any idea?

Max Over a year ago

Hi Purfakt, I'd guess that you're missing a spring dependency. We don't create the ClientRegistrationRepository bean manually.

Vincent F Over a year ago

it worked for me, thanks ! I had to add this dependency : 'org.apache.httpcomponents:httpclient:4.5.13'

Collectives™ on Stack Overflow

WebClient proxy configuration not working with oAuth2

1 Answer 1

3 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related