Add configurable client timeout

This is done for AA and PDP to be able to handle timeouts before infrastructure limits are met. #1777
OpenConext · Jan 29, 2025 · e824cf7 · e824cf7
1 parent 653faa4
commit e824cf7
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/app/config/parameters.yml.dist b/app/config/parameters.yml.dist
@@ -80,6 +80,12 @@ parameters:
     api.users.deprovision.username: lifecycle
     api.users.deprovision.password: secret
 
+    ##########################################################################################
+    ## CLIENT SETTINGS
+    ##########################################################################################
+    ## Currently this is used for the outgoing requests with the PDP and AA client
+    http_client.timeout: 10
+
     ##########################################################################################
     ## PDP SETTINGS
     ##########################################################################################

diff --git a/src/OpenConext/EngineBlockBundle/Resources/config/services.yml b/src/OpenConext/EngineBlockBundle/Resources/config/services.yml
@@ -202,6 +202,7 @@ services:
               # Verify CAs for certificates for prod, but not for other environments
               # as we are working with self signed signatures
               verify: "@=service('kernel').getEnvironment() === 'prod'"
+              timeout: "%http_client.timeout%"
 
     engineblock.authentication.authentication_loop_guard:
         class: OpenConext\EngineBlockBundle\Authentication\AuthenticationLoopGuard
@@ -255,6 +256,7 @@ services:
         class: GuzzleHttp\Client
         arguments:
             - auth: ["%attribute_aggregation.username%", "%attribute_aggregation.password%", "Basic"]
+              timeout: "%http_client.timeout%"
 
     engineblock.metadata.repository.cached_doctrine:
         class: OpenConext\EngineBlock\Metadata\MetadataRepository\CachedDoctrineMetadataRepository