Use http-proxy-middleware with express to access a protected resource

Question

I'm attempting to proxy a remote, protected resource.

The proxy doesn't work, so I'm guessing that I have not configured it correctly.

server.js:

const express = require('express');
const { createProxyMiddleware } = require('http-proxy-middleware');
    
const app = express();
app.use(express.json());
    
app.use('/api/employees', 
    createProxyMiddleware(
        {
            target: `https://api.bamboohr.com/api/gateway.php/${process.env.BAMBOOHR_API_SUBDOMAIN}/v1/employees/directory`,
            changeOrigin: true,
            headers: {
                Accept: 'application/json',
                Authorization: "Basic " + Buffer.from(process.env.BAMBOOHR_API_KEY + ":password").toString('base64')
            },
            logger: console,
        }
    )
);
    
app.listen(3030, 'localhost', () => {
    console.log('Service running');
});

When I try to contact the local URL, I get a 404 error:

No webpage was found for the web address: http://localhost:3030/api/employees

package.json:

{
  "dependencies": {
    "express": "^4.18.2",
    "http-proxy-middleware": "^2.0.6"
  }
}

What am I missing?

Adding secure: true had no effect.

craig
– craig

2023-02-16 15:44:55 +00:00
Commented Feb 16, 2023 at 15:44 — craig
– craig, Commented Feb 16, 2023 at 15:44

Wesley LeMahieu · Accepted Answer · 2023-02-15 01:21:47Z

0

Everything looks fine except I would pass secure: true to the createProxyMiddleware config since the external resource is HTTPS.

answered Feb 15, 2023 at 1:21

Wesley LeMahieu

2,6731 gold badge15 silver badges11 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

craig · Accepted Answer · 2023-02-16 15:44:47Z

I needed to change the target to reference the common base of the API and add a pathRewrite to remove /api/bamboohr:

app.use('/api/bamboohr', createProxyMiddleware({
    target: `https://api.bamboohr.com/api/gateway.php/${process.env.BAMBOOHR_API_SUBDOMAIN}/v1`,
    changeOrigin: true,
    headers: {
        Accept: 'application/json',
        Authorization: "Basic " + Buffer.from(process.env.BAMBOOHR_API_KEY + ":password").toString('base64')
    },
    pathRewrite: {
        [`^/api/bamboohr`]: '',
    },
}));

This allows me to map http://localhost:3000/api/bamboohr --> https://api.bamboohr.com/api/gateway.php/{subdomain}/v1

Without the pathRewrite entry, attempting to contact http://localhost:3000/api/bamboohr/employee/directory would result in https://api.bamboohr.com/api/gateway.php/{subdomain}/v1/api/gateway.php/subdomain/v1/api/bamboohr/employees/directory.

Collectives™ on Stack Overflow

Use http-proxy-middleware with express to access a protected resource

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related