Support setting X-Forwarded-* headers about okta-auth-java HOT 7 CLOSED

Thank you @bdemers !!

from okta-auth-java.

Thanks, @bdemers!

from okta-auth-java.

@mfulgo Let's chat about this use case a little more on this issue.

How much are you tweaking the response bodies when proxying the requests? Is it a straight proxy, or are you supporting a migration scenario ?

from okta-auth-java.

It's not a straight proxy: I'm expecting to drop the links and some other fields from the responses, as I expect the client application to know and follow a certain flow, and I don't want to expose the Okta endpoint URL.

I also need to do some custom validation of phone numbers used for SMS factors, which is one of the primary reasons for doing the proxy.

from okta-auth-java.

Thanks! that helps!

from okta-auth-java.

Any update here? I've looked through the docs and library and sadly it looks like I'd have to hack the inner-guts to send a X-Forwarded-* header (which is not easily feasible and comes with a host of its own problems). Appreciate your hard work on this library and any updates you have to share.

from okta-auth-java.

Nothing yet, what are you currently doing? maybe we can provide another option?

from okta-auth-java.