drakov icon indicating copy to clipboard operation
drakov copied to clipboard

Published 20 hours ago • verified publisher icon Aconex

Mutual TLS

Open timgent opened this issue 9 years ago • 2 comments

Would it be possible for drakov to use client certificates when it connects to the API?

timgent avatar Jul 06 '16 11:07 timgent

@timgent haven't done much with client TLS certs, could you describe how the process would work?

yakovkhalinsky avatar Jul 13 '16 09:07 yakovkhalinsky

2 options:

  1. Allows the hooks to be able to add client certificate details to all requests, similar to how other auth stuff can be done (I currently have in my hooks some stuff to do an OAuth2 login, get an auth token, and use that as a header for future requests. The NodeJS Request library I think handles certs well: https://github.com/request/request#using-optionsagentoptions

  2. Have it as part of the spec. I'm not quite sure how this would work, would still need to configure where it should get the certificate files from. Option 1 is definitely a quicker, easier fix

What do you think? I've not dug into your code base but could possibly take a look

timgent avatar Jul 13 '16 10:07 timgent