pwielgolaski / teamcity-oauth

teamcity oauth2 authentication plugin
Apache License 2.0
42 stars 25 forks source link

Is there plans to perform real validation of the certificate and ensure the payload hasn't been tampered with? #8

Closed NickJosevski closed 7 years ago

NickJosevski commented 7 years ago

There's only AcceptEverythingTrustManager so far, with no other notes, or issues raised (just seeing if you guys are still working on this)?

pwielgolaski commented 7 years ago

Open to make it as configuration switch, user can decide if it is on/off.

pwielgolaski commented 7 years ago

Fixed by https://github.com/pwielgolaski/teamcity-oauth/commit/8c2f3792492b3f0a4718183a9488e5a7ac6e3dbb