This message was deleted.

Do you have any auth-related or header whitelisting configuration on the reverse proxy? Can you share a list of http header names that actually passed to Nexus after the reverse proxy?

Ended up dumping out all HTTP requests from Gradle to troubleshoot a similar problem. If anyone knows of a cleaner way…

public fun enableHttpClientHeaderLogging() {
    val loggerFactory = LoggerFactory.getILoggerFactory() as OutputEventListenerBackedLoggerContext
    val loggersField: Field = OutputEventListenerBackedLoggerContext::class.java.declaredFields.first { it.name == "loggers" }
    loggersField.isAccessible = true
    val loggers = loggersField.get(loggerFactory) as java.util.concurrent.ConcurrentHashMap<*, *>
    loggers.remove("org.apache.http.headers")
    println("Enabled HTTP client header logging; you may need to restart the daemon (./gradlew daemon --stop)")
}

After stopping the daemon, run your build with

--debug

- there will be

org.apache.http

entries showing HTTP traffic (headers etc)

Thanks for the input. Haven’t found time to get back to the topic yet. If we get back to it and find anything interesting I’ll share it here.