-
Notifications
You must be signed in to change notification settings - Fork 513
Description
I have client C connecting to server S through proxy A.
C is sending CONNECT to A with Proxy Authorization Header.
Proxy A validates Proxy Authorization Header and if valid first creates TCP tunnel to server S and sends 200 to client C.
This is a successful HTTP tunnel (I guess this is a layer under 2 TCP connections and proxy is acting as a relay in between and not really a tunnel) establishing process to server S.
Now because this is not encrypted tunnel I assume we could intercept subsequent HTTP requests using this module.
Now I am wondering if we could add the Proxy authorization Header to this HTTP request as Authorization header so that server can do some validations further.
This is needed because here client are legacy without having and authorization implemented in them. Right now there is raw TCP based forward proxy in client side too that add this Proxy Authorization header.