Be able to configure curl verify -host and peer

Author: mariusjp

composer.json

@@ -2,7 +2,7 @@
     "name": "coddin-web/oidc-client-laravel-wrapper",
     "description": "A Laravel wrapper of jumbojett's OpenID Connect Client",
     "type": "library",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "minimum-stability": "stable",
     "prefer-stable": true,
     "require": {

config/oidc.php

@@ -17,4 +17,8 @@
     'token_storage' => [
         'adaptor' => null,
     ],
+    'curl' => [
+        'verify_host' => env('OIDC_CURL_VERIFY_HOST', true),
+        'verify_peer' => env('OIDC_CURL_VERIFY_PEER', true),
+    ],
 ];

src/Builder/OpenIDConnectClientBuilder.php

@@ -34,6 +34,9 @@ public function execute(): OpenIDConnectClient
             $openIDClient->setCodeChallengeMethod('S256');
         }
 
+        $openIDClient->setVerifyHost($this->configRepository->getAsBool('oidc.curl.verify_host'));
+        $openIDClient->setVerifyPeer($this->configRepository->getAsBool('oidc.curl.verify_peer'));
+
         $openIDClient->setRedirectURL(
             url: rtrim($appUrl, '/') . $this->configRepository->getAsString('oidc.client.redirect_url'),
         );

tests/Unit/Builder/OpenIDConnectClientBuilderTest.php

@@ -51,15 +51,19 @@ public function authorization_code_flow(): void
             );
 
         $this->configRepository
-            ->expects(self::exactly(2))
+            ->expects(self::exactly(4))
             ->method('getAsBool')
             ->withConsecutive(
                 ['oidc.client.use_pkce'],
                 ['oidc.client.use_pkce'],
+                ['oidc.curl.verify_host'],
+                ['oidc.curl.verify_peer'],
             )
             ->willReturnOnConsecutiveCalls(
                 false,
                 false,
+                true,
+                true,
             );
 
         $openIdConnectBuilder = new OpenIDConnectClientBuilder(
@@ -101,15 +105,19 @@ public function authorization_code_flow_with_PKCE(): void
             );
 
         $this->configRepository
-            ->expects(self::exactly(2))
+            ->expects(self::exactly(4))
             ->method('getAsBool')
             ->withConsecutive(
                 ['oidc.client.use_pkce'],
                 ['oidc.client.use_pkce'],
+                ['oidc.curl.verify_host'],
+                ['oidc.curl.verify_peer'],
             )
             ->willReturnOnConsecutiveCalls(
                 true,
                 true,
+                true,
+                true,
             );
 
         $openIdConnectBuilder = new OpenIDConnectClientBuilder(