Changes

This PR adds a new constructor for both AuthAPI and ManagementAPI classes that accepts a set of ClientOptions (final name can still change).

The idea is that from now on, every new property that we want to configure in the OkHttpClient comes through this options object. This way, we reduce the exposure of third-party classes in our public API.

For now, this Options object accepts a ProxyOptions object (final name also subject to change), that will hold the Proxy instance and any basic authentication, if required.

Usage

Proxy proxy = new Proxy(Proxy.Type.HTTP, new InetSocketAddress("localhost", 9090));
ProxyOptions proxyOptions = new ProxyOptions(proxy);
//proxyOptions.setBasicAuthentication("johndoe", "psswd".toCharArray()); //- Optional
HttpOptions httpOptions = new HttpOptions();
httpOptions.setProxyOptions(proxyOptions);

AuthAPI api = new AuthAPI(DOMAIN, CLIENT_ID, CLIENT_SECRET, httpOptions);

Local environment setup

In order to test the SDK with a Proxy, I've followed these steps to set up a local proxy:

1. Download proxyman or any other proxy that supports authentication.
2. Enable the Proxy. Browser requests should be blocked for now.
3. Whitelist the proxy certificate in the keychain and trust it. Proxyman offers a helper tool to do this for you when provided with the root password. Browser requests should start coming through the proxy now.
4. Whitelist the proxy certificate in the JVM and trust it. I've achieved this with the following command:

sudo keytool -keystore ${JAVA_HOME}/jre/lib/security/cacerts -storepass changeit -import -trustcacerts -v -alias {alias}CA -file {certificate}.pem

Create a class or test to try the code snippet in the section above. Requests made by classes, like tests, should now come through.

References

The feature was originally requested here #91

Testing

• This change adds test coverage
• This change has been tested on the latest version of the platform/language or why not

Checklist

• I have read the Auth0 general contribution guidelines
• I have read the Auth0 Code of Conduct
• All existing and new tests complete without errors