fix(oidc): Add configurable HTTP timeout for OIDC client (#1575)

docker-compose-dev.yml

@@ -78,6 +78,7 @@ services:
       # - OIDC_IGNORE_USERNAME=true
       # - OIDC_IGNORE_ROLES=true
       # - OIDC_ENFORCED=true
+      # - OIDC_TIMEOUT=3500
       # - OIDC_DEBUG=true
 
       # Email Notifications (https://nodemailer.com/smtp/)

docker-compose.yml

@@ -96,6 +96,7 @@ services:
       # - OIDC_IGNORE_USERNAME=true
       # - OIDC_IGNORE_ROLES=true
       # - OIDC_ENFORCED=true
+      # - OIDC_TIMEOUT=3500
       # - OIDC_DEBUG=true
 
       # Email Notifications (https://nodemailer.com/smtp/)

server/.env.sample

@@ -69,6 +69,7 @@ SECRET_KEY=notsecretkey
 # OIDC_IGNORE_USERNAME=true
 # OIDC_IGNORE_ROLES=true
 # OIDC_ENFORCED=true
+# OIDC_TIMEOUT=3500
 # OIDC_DEBUG=true
 
 # Email Notifications (https://nodemailer.com/smtp/)

server/api/hooks/oidc/index.js

@@ -45,6 +45,12 @@ module.exports = function defineOidcHook(sails) {
       clientInitPromise = (async () => {
         sails.log.info('Initializing OIDC client');
 
+        if (sails.config.custom.oidcTimeout !== null) {
+          openidClient.custom.setHttpOptionsDefaults({
+            timeout: sails.config.custom.oidcTimeout,
+          });
+        }
+
         let issuer;
         try {
           issuer = await openidClient.Issuer.discover(sails.config.custom.oidcIssuer);

server/config/custom.js

@@ -92,6 +92,7 @@ module.exports.custom = {
   oidcIgnoreUsername: process.env.OIDC_IGNORE_USERNAME === 'true',
   oidcIgnoreRoles: process.env.OIDC_IGNORE_ROLES === 'true',
   oidcEnforced: process.env.OIDC_ENFORCED === 'true',
+  oidcTimeout: envToNumber(process.env.OIDC_TIMEOUT),
   oidcDebug: process.env.OIDC_DEBUG === 'true',
 
   // TODO: move client base url to environment variable?