bench
bench copied to clipboard
feat: allow nginx apply mtls for a specific path
For this change to work on the bench, it is necessary to analyze the frappe pull request: https://github.com/frappe/frappe/pull/28125
Currently, some integrations that work with sensitive data are required to use mTLS, for example integration with credit card companies, banks, fintechs...
mTLS consists of validating whether the client is using a valid certificate to access the service, but it is a two-way validation, in this case it validates the client and server certificates.
Requests to the URL "/api/secure/{methodname}" will require mandatory validation at both ends of the digital certificate, thus applying mTLS validation by nginx.
ssl_verify_client optional was chosen because this method does not impact other URLs.