Merge pull request #76 from nov/feature/mtls_on_userinfo

mTLS access token
nov · Oct 10, 2022 · 6682dd7 · 6682dd7
2 parents 1620778 + ac71875
commit 6682dd7
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 1 deletion.
diff --git a/lib/openid_connect/access_token.rb b/lib/openid_connect/access_token.rb
@@ -15,6 +15,13 @@ def userinfo!(params = {})
       ResponseObject::UserInfo.new hash
     end
 
+    def to_mtls(attributes = {})
+      (required_attributes + optional_attributes).each do |key|
+        attributes[key] = self.send(key)
+      end
+      MTLS.new attributes
+    end
+
     private
 
     def resource_request
@@ -33,4 +40,6 @@ def resource_request
       end
     end
   end
-end
+end
+
+require 'openid_connect/access_token/mtls'
diff --git a/lib/openid_connect/access_token/mtls.rb b/lib/openid_connect/access_token/mtls.rb
@@ -0,0 +1,9 @@
+module OpenIDConnect
+  class AccessToken::MTLS < AccessToken
+    def initialize(attributes = {})
+      super
+      http_client.ssl.client_key  = attributes[:private_key] || client.private_key
+      http_client.ssl.client_cert = attributes[:certificate] || client.certificate
+    end
+  end
+end