Adds NO_PROXY support for proxy configuration. Closes #7165

Author: Zekai-Zhao-321

docs/docs/user-guide/using-proxy-url.mdx

@@ -15,3 +15,20 @@ When using a proxy, it's important to understand the different parts of a proxy
 - **username and password**: if the proxy server requires authentication, you will need to provide a username and password
 - **host**: the hostname or IP address of the proxy server
 - **port number**: the port number on which the proxy server is listening. Defaults to 443 for the `HTTPS` protocol, otherwise it defaults to 80 when not provided
+
+## Bypassing the proxy for specific hosts
+
+If you need certain requests to bypass the proxy, you can use the `NO_PROXY` (or `no_proxy`) environment variable. This is a comma-separated list of hostnames or domain patterns that should not be routed through the proxy.
+
+Supported patterns:
+
+- **Exact hostname**: `example.com` — matches only `example.com`
+- **Wildcard domain**: `*.example.com` — matches `sub.example.com` and `example.com`
+- **Dot-prefix domain**: `.example.com` — same behavior as `*.example.com`
+- **Wildcard all**: `*` — bypasses the proxy for all requests
+
+For example, to bypass the proxy for Microsoft authentication endpoints:
+
+```sh
+export NO_PROXY="*.microsoftonline.com,*.microsoft.com,*.azure.net,login.microsoftonline.com"
+```

src/request.spec.ts

@@ -377,6 +377,157 @@ describe('Request', () => {
     assert(proxyConfigured);
   });
 
+  it('bypasses proxy when NO_PROXY matches exact hostname', async () => {
+    sinon.stub(process, 'env').value({ 'HTTPS_PROXY': 'http://proxy.contoso.com:8080', 'NO_PROXY': 'contoso.sharepoint.com' });
+
+    sinon.stub(_request as any, 'req').callsFake((options) => {
+      _options = options as CliRequestOptions;
+      return { data: {} };
+    });
+
+    await _request
+      .get({
+        url: 'https://contoso.sharepoint.com/'
+      });
+
+    assert.strictEqual(_options.proxy, false);
+  });
+
+  it('bypasses proxy when NO_PROXY matches wildcard domain', async () => {
+    sinon.stub(process, 'env').value({ 'HTTPS_PROXY': 'http://proxy.contoso.com:8080', 'NO_PROXY': '*.sharepoint.com' });
+
+    sinon.stub(_request as any, 'req').callsFake((options) => {
+      _options = options as CliRequestOptions;
+      return { data: {} };
+    });
+
+    await _request
+      .get({
+        url: 'https://contoso.sharepoint.com/'
+      });
+
+    assert.strictEqual(_options.proxy, false);
+  });
+
+  it('bypasses proxy when NO_PROXY matches dot-prefix domain', async () => {
+    sinon.stub(process, 'env').value({ 'HTTPS_PROXY': 'http://proxy.contoso.com:8080', 'NO_PROXY': '.sharepoint.com' });
+
+    sinon.stub(_request as any, 'req').callsFake((options) => {
+      _options = options as CliRequestOptions;
+      return { data: {} };
+    });
+
+    await _request
+      .get({
+        url: 'https://contoso.sharepoint.com/'
+      });
+
+    assert.strictEqual(_options.proxy, false);
+  });
+
+  it('bypasses proxy when NO_PROXY is wildcard *', async () => {
+    sinon.stub(process, 'env').value({ 'HTTPS_PROXY': 'http://proxy.contoso.com:8080', 'NO_PROXY': '*' });
+
+    sinon.stub(_request as any, 'req').callsFake((options) => {
+      _options = options as CliRequestOptions;
+      return { data: {} };
+    });
+
+    await _request
+      .get({
+        url: 'https://contoso.sharepoint.com/'
+      });
+
+    assert.strictEqual(_options.proxy, false);
+  });
+
+  it('does not bypass proxy when NO_PROXY does not match hostname', async () => {
+    let proxyConfigured = false;
+    sinon.stub(process, 'env').value({ 'HTTPS_PROXY': 'http://proxy.contoso.com:8080', 'NO_PROXY': '*.example.com' });
+
+    sinon.stub(_request as any, 'req').callsFake((options) => {
+      _options = options as CliRequestOptions;
+      proxyConfigured = !!_options.proxy &&
+        _options.proxy.host === 'proxy.contoso.com' &&
+        _options.proxy.port === 8080 &&
+        _options.proxy.protocol === 'http';
+      return { data: {} };
+    });
+
+    await _request
+      .get({
+        url: 'https://contoso.sharepoint.com/'
+      });
+
+    assert(proxyConfigured);
+  });
+
+  it('bypasses proxy when NO_PROXY contains multiple entries and one matches', async () => {
+    sinon.stub(process, 'env').value({ 'HTTPS_PROXY': 'http://proxy.contoso.com:8080', 'NO_PROXY': 'example.com, *.sharepoint.com, localhost' });
+
+    sinon.stub(_request as any, 'req').callsFake((options) => {
+      _options = options as CliRequestOptions;
+      return { data: {} };
+    });
+
+    await _request
+      .get({
+        url: 'https://contoso.sharepoint.com/'
+      });
+
+    assert.strictEqual(_options.proxy, false);
+  });
+
+  it('bypasses proxy with case-insensitive NO_PROXY matching', async () => {
+    sinon.stub(process, 'env').value({ 'HTTPS_PROXY': 'http://proxy.contoso.com:8080', 'NO_PROXY': '*.SharePoint.COM' });
+
+    sinon.stub(_request as any, 'req').callsFake((options) => {
+      _options = options as CliRequestOptions;
+      return { data: {} };
+    });
+
+    await _request
+      .get({
+        url: 'https://contoso.sharepoint.com/'
+      });
+
+    assert.strictEqual(_options.proxy, false);
+  });
+
+  it('reads no_proxy (lowercase) environment variable', async () => {
+    const env: Record<string, string> = { 'HTTPS_PROXY': 'http://proxy.contoso.com:8080' };
+    env['no_proxy'] = 'contoso.sharepoint.com';
+    sinon.stub(process, 'env').value(env);
+
+    sinon.stub(_request as any, 'req').callsFake((options) => {
+      _options = options as CliRequestOptions;
+      return { data: {} };
+    });
+
+    await _request
+      .get({
+        url: 'https://contoso.sharepoint.com/'
+      });
+
+    assert.strictEqual(_options.proxy, false);
+  });
+
+  it('bypasses proxy when NO_PROXY wildcard matches the root domain exactly', async () => {
+    sinon.stub(process, 'env').value({ 'HTTPS_PROXY': 'http://proxy.contoso.com:8080', 'NO_PROXY': '*.sharepoint.com' });
+
+    sinon.stub(_request as any, 'req').callsFake((options) => {
+      _options = options as CliRequestOptions;
+      return { data: {} };
+    });
+
+    await _request
+      .get({
+        url: 'https://sharepoint.com/'
+      });
+
+    assert.strictEqual(_options.proxy, false);
+  });
+
   it('correctly handles failed GET request', async () => {
     sinon.stub(_request as any, 'req').callsFake(options => {
       _options = options as CliRequestOptions;

src/request.ts

@@ -189,7 +189,12 @@ class Request {
       const proxyUrl = process.env.HTTP_PROXY || process.env.HTTPS_PROXY;
 
       if (proxyUrl) {
-        options.proxy = this.createProxyConfigFromUrl(proxyUrl);
+        if (this.shouldBypassProxy(options.url!)) {
+          options.proxy = false;
+        }
+        else {
+          options.proxy = this.createProxyConfigFromUrl(proxyUrl);
+        }
       }
 
       const res = await this.req(options);
@@ -236,6 +241,34 @@ class Request {
       options.url!.substring(8).replace('//', '/');
   }
 
+  private shouldBypassProxy(requestUrl: string): boolean {
+    const noProxy = process.env.NO_PROXY || process.env.no_proxy;
+
+    if (!noProxy) {
+      return false;
+    }
+
+    const hostname = new URL(requestUrl).hostname.toLowerCase();
+    const entries = noProxy.split(',').map(e => e.trim().toLowerCase()).filter(e => e);
+
+    return entries.some(entry => {
+      if (entry === '*') {
+        return true;
+      }
+
+      if (entry.startsWith('*.')) {
+        const domain = entry.substring(1);
+        return hostname.endsWith(domain) || hostname === entry.substring(2);
+      }
+
+      if (entry.startsWith('.')) {
+        return hostname.endsWith(entry) || hostname === entry.substring(1);
+      }
+
+      return hostname === entry || hostname.endsWith('.' + entry);
+    });
+  }
+
   private createProxyConfigFromUrl(url: string): AxiosProxyConfig {
     const parsedUrl = new URL(url);
     const port = parsedUrl.port || (url.toLowerCase().startsWith('https') ? 443 : 80);