Does it support client certificate authentication?

[zephrxx]

Some rest api requires client cert authentication.

[Huachao]

@zephrxx it's not supported now, thanks for your suggestion and I will put it in my backlog

[ondrej-li]

This one should be fairly easy to implement. I can imagine 3 more items in the request:

• client certificate
• private key
• private key password (optional)

All three can be in the plain text form, eligible for env. params substitution (environment aware).

https://www.npmjs.com/package/request#tlsssl-protocol for more.

[Huachao]

@defectus you are right, I am considering that how to let user to specify these items in request, the more direct way seems to put in request(that seems needs to create a new syntax to set these value), others ways are putting in setting files, or even add some dialogs to let user to CRUD these friendly

[ondrej-li]

Just keep in mind that for many people (at least for me :-)) client certificates differ between environments. We use different client certificates in production, staging and integration.

Whatever way you plan to implement this feature please allow us to easily configure certificates based on the selected environment.

[danielwagn3r]

An idea good be to use the underlaying OS certificate store which should work fine for Windows and MacOS. Referencing the Certificate could be done be specifing the store and fingerprint.

[Huachao]

@zephrxx @defectus @kwaxi @VitorLuizC @mFingers @ytimenkov I have implemented the client certificate feature, and will publish it in next version

[Huachao]

@zephrxx @defectus @kwaxi @VitorLuizC @mFingers @ytimenkov You can use the latest version 0.14.0, you can also follow the README for how to use it.

[ondrej-li]

Just tested it, works nicely! Good job, many thanks!

[MichaelHumplEnBW]

There are two different interpretations of "client certificate authentication":

• By using the certificate for the ssl-connection, like is is decribed at the README of the Release 0.14.0
• Using the certificate to sign a JWT als client_assertion, like is described at the section "Second case: Access token request with a certificate" at https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-client-creds-grant-flow

Is there a way to generate the client_assertion which is needed for the cert. based OAuth-Login to a Azure AD?
Thank you for your help.