0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-06 04:48:33 +08:00
discourse/plugins/discourse-openid-connect/spec
Chris Alberti 30d8364f0a
DEV: Support mTLS for OIDC auth (#41524)
Adds support for mTLS for OIDC auth in the discourse-openid-connect
plugin.

If the SiteSettings `openid_connect_mtls_client_cert` and
`openid_connect_mtls_client_key` are set, then tell OmniAuth to use
auth_scheme `tls_client_auth` and pass the cert and key to the
connection ssl options. OmniAuth will skip sending the client_secret in
favor of the cert.

Optionally, SiteSetting `openid_connect_mtls_client_key_passcode` can be
provided to decrypt the private key.

Related to dev topic t/185887
2026-07-17 15:59:55 -05:00
..
lib DEV: Support mTLS for OIDC auth (#41524) 2026-07-17 15:59:55 -05:00
requests
system DEV: Update rubocop (#38721) 2026-03-20 00:39:52 +01:00