Module client 

SSRF-safe HTTP client construction.

All outbound HTTP clients that contact external services (OIDC JWKS endpoints, Vault, federation subgraphs, webhooks) must be built with this module to ensure a consistent security baseline.

Functions

build_ssrf_safe_client

Build an HTTP client that is safe for SSRF-sensitive outbound requests.