SohoHouse / nuxt-oauth

Simple OAuth2 integration for your Nuxt app
MIT License
122 stars 27 forks source link

Token request get rejected with self-signed certificates #28

Closed vroad closed 4 years ago

vroad commented 6 years ago

Token request gets rejected because of self-signed certificates in development environment, and I don't know how to disable SSL certificate verification. The browser redirects to authenticate page again when nuxt-oauth fails to obtain token from token endpoint, so I didn't know what happened until I attach debugger to node. Setting NODE_TLS_REJECT_UNAUTHORIZED does not seem to have an effect on this behavior.

nuxt-oauth depends on client-oauth2, and client-oauth2 depends on popsicle for http request. I guess I need to set rejectUnauthorized of popsicle http transport to false in some way, but how? I need this for development environment.

https://github.com/mulesoft/js-client-oauth2 https://github.com/serviejs/popsicle

vroad commented 6 years ago

I've found that you could pass your own request function when creating an instance of OAuth2, but nuxt-oauth does not expose it in options.

https://github.com/SohoHouse/nuxt-oauth/blob/7228185512978cc905707c439ded1795a64427d7/lib/handler.js#L39 https://github.com/mulesoft/js-client-oauth2/blob/93fe02f48802324b2d1ef2754e3675a7eb94357a/src/client-oauth2.js#L208

samtgarson commented 4 years ago

Closing as stale.