Specify custom CA Cert?

[DnOberon]

I'm still new to Elixir/Erlang and am just wondering how I can specify a custom CA cert to be used in the requests - not finding info on that anywhere :\

[maennchen]

This is possible by passing an ssl option to the request_options of most function.

Example:

• Erlang: oidcc:retrieve_token(AuthCode, Provider, CLientId, ClientSecret, #{request_opts => #{ssl => [{cacerts, YourCert}}
• Elixir: Oidcc.retrieve_token(auth_code, provider, client_id, client_secret, %{request_opts: %{ssl: [cacerts: your_cert]}})

The request_opts are documented here: https://hexdocs.pm/oidcc/oidcc_http_util.html#t:request_opts/0

[maennchen]

See #278

[DnOberon]

No worries. I'll look at how I can potentially contribute. I'm still new, but this might be simple enough for me to handle. Unfortunately both those tools are locked down by my workplace. I've got another option though.

[maennchen]

@DnOberon Release v3.1.0-beta.1 has a new quirks option that allows disabling the HTTPS check.

https://hexdocs.pm/oidcc/3.1.0-beta.1/oidcc_provider_configuration.html#t:quirks/0

Does this fit your needs for local development?

[DnOberon]

@maennchen tested and it covers my use case. Thank you so much for taking some time to do this, we at the Idaho National Laboratory thank you profusely!

[maennchen]

@DnOberon I forgot to ask: I added your provider in the integration test suite:

oidcc/test/oidcc_authorization_SUITE.erl

Line 13 in f00b016

oidcc_provider_configuration_worker:start_link(#{

Is that ok for you?

[DnOberon]

Absolutely! Thank you!

…

On Sun, Oct 22, 2023 at 5:09 AM Jonatan Männchen ***@***.***> wrote: @DnOberon <https://github.com/DnOberon> Release v3.1.0-beta.1 has a new quirks option that allows disabling the HTTPS check. https://hexdocs.pm/oidcc/3.1.0-beta.1/oidcc_provider_configuration.html#t:quirks/0 Does this fit your needs for local development? — Reply to this email directly, view it on GitHub <#276 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAFS4N7QSU5JEVHC3KHH2UTYAT5HHAVCNFSM6AAAAAA6CWD3B6VHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM3TGNJQGUZDI> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[DnOberon]

Yeah that’s fine. It’s a public endpoint.

…

On Sun, Oct 22, 2023 at 1:59 PM Jonatan Männchen ***@***.***> wrote: @DnOberon <https://github.com/DnOberon> I forgot to ask: I added your provider in the integration test suite: https://github.com/erlef/oidcc/blob/f00b016e30ad324bb5c49e96cba296f8bff9e9e5/test/oidcc_authorization_SUITE.erl#L13 Is that ok for you? — Reply to this email directly, view it on GitHub <#276 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAFS4N2XXVIRKFOUQOAVR53YAV3KTAVCNFSM6AAAAAA6CWD3B6VHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM3TGNJSHAYDS> . You are receiving this because you were mentioned.Message ID: ***@***.***>