-
Notifications
You must be signed in to change notification settings - Fork 124
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
New ca_cert
parameter in FetchJwksUriSigningKey class
#2457
Conversation
8b5a75b
to
4c33c48
Compare
app/domain/authentication/authn_jwt/signing_key/fetch_jwks_uri_signing_key.rb
Outdated
Show resolved
Hide resolved
4c33c48
to
2d2de16
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Expected parameter type is OpenSSL::X509::Store The parameter will allow to invoke http requests to endpoints providing self-signed certificate or certificate signed by 3rd party CA
2d2de16
to
b7b1757
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
jwks_keys | ||
end | ||
|
||
def jwks_keys |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Complex method Authentication::AuthnJwt::SigningKey::FetchJwksUriSigningKey#jwks_keys (25.4)
) | ||
end | ||
|
||
def net_http_start(host, port, use_ssl, &block) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Authentication::AuthnJwt::SigningKey::FetchJwksUriSigningKey takes parameters ['host', 'port', 'use_ssl'] to 3 methods
Code Climate has analyzed commit b7b1757 and detected 3 issues on this pull request. Here's the issue category breakdown:
The test coverage on the diff in this pull request is 100.0% (50% is the threshold). This pull request will bring the total coverage in the repository to 91.0% (0.0% change). View more on Code Climate. |
Desired Outcome
Allow FetchJwksUriSigningKey class fetch JWKS data from endpoints are providing self-signed certificate or certificate signed by 3rd party CA.
Implemented Changes
Add new
ca_cert
parameter to FetchJwksUriSigningKey classConnected Issue/Story
ONYX-15871
Definition of Done
Changelog
CHANGELOG update
Test coverage
changes, or
Documentation
README
s) were updated in this PRBehavior
Security