Skip to content

Add proxy support: honor system proxy and HTTPS_PROXY/HTTP_PROXY/NO_PROXY #19

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
rodchristiansen merged 4 commits into from
May 12, 2026
Merged

Add proxy support: honor system proxy and HTTPS_PROXY/HTTP_PROXY/NO_PROXY #19

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
5b1107b
Remove dead Sources/asbmutil/ directory
rodchristiansen May 7, 2026
28f67cc
Honor system proxy and HTTPS_PROXY/HTTP_PROXY/NO_PROXY env vars
rodchristiansen May 7, 2026
8a04f96
Match NO_PROXY patterns with leading *. as suffix matches
rodchristiansen May 8, 2026
e47c1c9
Fix Linux build: gate Darwin-only CFNetwork proxy keys
rodchristiansen May 12, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 15 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -613,6 +613,21 @@ Both modes use efficient server-side device listing (4-5 API calls regardless of
}
```

## Network proxy

`asbmutil` honors the macOS system proxy / PAC by default — no configuration needed in most managed environments.

For headless or container use you can also set the standard env vars:

```bash
export HTTPS_PROXY=http://proxy.corp.example:8080
export NO_PROXY=*.internal.example,localhost
```
Comment on lines +622 to +625

`HTTPS_PROXY` is preferred (all API traffic is HTTPS); `HTTP_PROXY` is honored as a fallback. `NO_PROXY` is matched against the auth host (`account.apple.com`) and the scope-specific API host (`api-business.apple.com` or `api-school.apple.com`); if every host is bypassed, the env-var proxy is skipped and the system proxy applies. Lowercase variants (`https_proxy`, etc.) work too.

Proxies that require authentication should rely on system credentials (Negotiate/Kerberos via macOS); embedded `user:pass@` in the proxy URL is not currently extracted.

## Requirements

* macOS 14 or newer
Expand Down
Loading
Loading