https-proxy-agent

May 24, 2026 · View on GitHub

9.1.0

Minor Changes

  • 84e85ed: Add onProxyAuth callback and negotiate option for Kerberos/SPNEGO proxy authentication

    • Extract shared Negotiate/SPNEGO auth logic into new proxy-agent-negotiate package
    • Added optional onProxyAuth async callback to HttpsProxyAgent and HttpProxyAgent options
    • When the proxy responds with 407 Proxy-Authentication Required, the callback is invoked with the response and auth scheme
    • The callback returns headers (e.g. Proxy-Authorization) to retry the request with
    • Added negotiate: true option that uses the kerberos package for automatic Negotiate/SPNEGO auth
    • Added kerberos as an optional peer dependency of proxy-agent-negotiate
    • Extended the proxy test package to support authenticate: 'negotiate' mode for mock testing
  • 3ebf4b2: Add proxy event emission on the request object for all proxy agents. After the proxy connection is established, the request emits a proxy event with { proxy, socket } where proxy is the proxy URL string. This is useful for debugging and logging which proxy was used for a connection.

Patch Changes

  • 1852c75: Fix socket event race condition by deferring socket.resume() via setImmediate(), ensuring HTTP client machinery has time to attach data listeners before data starts flowing
  • Updated dependencies [84e85ed]
    • proxy-agent-negotiate@1.1.0

9.0.0

Major Changes

  • 7d12b51: Set minimum Node.js version to 20

Patch Changes

  • 7ca27d0: Simplify package.json exports to remove unnecessary imports restriction
  • Updated dependencies [ca12148]
  • Updated dependencies [7d12b51]
  • Updated dependencies [7ca27d0]
    • agent-base@9.0.0

8.0.0

Major Changes

  • 9c92c09: Convert to ESM. All packages now use "type": "module" and compile to ESM output instead of CommonJS.

Patch Changes

  • Updated dependencies [9c92c09]
    • agent-base@8.0.0

7.0.6

Patch Changes

  • 913a49a: Only overwrite servername in tls connect when host is not an IP address
  • Updated dependencies [1699a09]
    • agent-base@7.1.2

7.0.5

Patch Changes

  • 5908e84: Remove net.isIP() check for TLS servername

7.0.4

Patch Changes

  • b88ab46: Import url instead of node:url 🤷‍♂️

7.0.3

Patch Changes

  • c3c405e: Add missing URL type import

7.0.2

Patch Changes

  • e625d10: Support SNI for proxy servers

7.0.1

Patch Changes

  • 23fe1e3: Correct the header parsing logic to stop before the response content to avoid generating an exception.

7.0.0

Major Changes

  • b3860aa: Remove secureProxy getter

    It was not meant to be a public property. If you were using it, just use agent.proxy.protocol === 'https:' instead.

6.2.1

Patch Changes

  • 0b8a0b7: Properly reject errors during proxy CONNECT response

6.2.0

Minor Changes

  • 8ff9faa: "headers" option can now be a function

Patch Changes

  • Updated dependencies [66b4c63]
    • agent-base@7.0.2

6.1.0

Minor Changes

  • fd6209c: Emit "proxyConnect" event on HTTP request object (part of #153)
  • c573dbe: Emit "proxyConnect" event on Agent instance

Patch Changes

  • 7674748: Update @types/node to v14.18.45
  • Updated dependencies [7674748]
    • agent-base@7.0.1

6.0.0

Major Changes

  • d99a7c8: Major version bump for all packages
    • ⚠️ This is a breaking change! The HttpsProxyAgent constructor argument has been split into two arguments.

Upgrading from 5.x to 6.x

In version 5.x, the HttpsProxyAgent constructor took a single argument of either (A) a string, or (B) an object matching the output of the deprecated url.parse() method and various extra options.

Now the constructor takes two separate arguments:

  • Argument 1: Either (A) a string, or (B) a WHATWG URL object
  • Argument 2 (optional): An object with standard http.Agent, net.TcpNetConnectOpts, and tls.ConnectionOptions properties and/or custom options supported by this package.

If you were using an object argument in 5.x, you'll need to change the first argument to match the structure of the URL class, and move any other options to the second argument.

5.x usage:

const agent = new HttpsProxyAgent({
  protocol: 'https:',
  host: 'myproxy.mydomain.com'
  port: '1234',
  auth: 'proxyUser:proxyPass',
  timeout: 1000,
  headers: { 'trace', 'foo' }
});

Updated 6.x usage:

const agent = new HttpsProxyAgent(
  'https://proxyUser:proxyPass@myproxy.mydomain.com:1234',
  {
    timeout: 1000,
    headers: { 'trace', 'foo' }
  }
);

Minor Changes

  • 4333067: Add support for core keepAlive: true

Patch Changes

  • c169ced: Convert mocha tests to jest for all packages
  • 06775a8: Add test for rejectUnauthorized: false missing on request options
  • Updated dependencies [c169ced]
  • Updated dependencies [d99a7c8]
  • Updated dependencies [4333067]
    • agent-base@7.0.0