[NIFI-9456] Use OIDC Server Behind Proxy with NIFI

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Duplicate
• Affects Version/s: 1.11.4
• Component/s: Core Framework
• Assignee: David Handermann
• Reporter: mayki
• Created: 08/Dec/21 09:59
• Updated: 08/Dec/21 14:51
• Resolved: 08/Dec/21 14:51

Description

Hi all,

I'm try configure NIFI with OIDC. 

It is work with OIDC Dev because NIFI has acces directly to OIDC.

We got OIDC PROD which is behind the proxy

I have tried to setup proxy parameter in bootstrap.conf but it is not work.

java.arg.18=-Dhttp.proxyHost=http://proxy.fr
java.arg.19=-Dhttp.proxyPort=8888 
java.arg.20=-Dhttps.proxyHost=http://proxy.fr
java.arg.21=-Dhttps.proxyPort=8888
 

 

2021-12-08 10:41:49,340 ERROR [main] o.s.web.context.ContextLoader Context initialization failed
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'oidcProvider' defined in class path resource [nifi-web-security-context.xml]: Bean instantiation via constructor failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.web.security.oidc.StandardOidcIdentityProvider]: Constructor threw exception; nested exception is java.lang.RuntimeException: Unable to retrieve OpenId Connect Provider metadata from: https://oidc.xxxxxxxx
        at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:279)
        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:1198)
        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1100)
        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:511)
        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:481)
        at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:312)
        at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:230)
 

So it is possible to use OIDC behing PROXY with NIFI JVM ?

 

Regards 

Issue Links

• duplicates: NIFI-8056 OpenID Connect Integration does not support Proxy Servers