Hi, I set "verify" to false but OAuth2Plugin seems do not use the go

Hello <a class="user-mention notranslate" data-hovercard-type="user"

Hello <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-ur

Bad client used ? about guzzlebundleoauth2plugin HOT 3 OPEN

adpeyre commented on June 18, 2024

Bad client used ?

from guzzlebundleoauth2plugin.

Comments (3)

gregurco commented on June 18, 2024

Hello

@adpeyre could you please share more information? Where do you setup "verify"? Which client is used and which should be used? etc.

from guzzlebundleoauth2plugin.

adpeyre commented on June 18, 2024

Hello @gregurco !

I share my configuration, It's easier. :)

eight_points_guzzle:
    clients:
        erp:
            base_url: '%env(ERP_API_BASE_URL)%'
            # Request options: http://docs.guzzlephp.org/en/stable/request-options.html
            options:
                auth: oauth2
                verify: false

            # Find plugins here:
            # https://github.com/8p/EightPointsGuzzleBundle#known-and-supported-plugins
            plugin:
                # More information: https://packagist.org/packages/gregurco/guzzle-bundle-oauth2-plugin
                oauth2:
                    base_uri: '%env(ERP_API_OAUTH_BASE_URL)%'
                    token_url: "/connect/token"
                    client_id: '%env(ERP_API_OAUTH_CLIENT_ID)%'
                    client_secret: '%env(ERP_API_OAUTH_CLIENT_SECRET)%'
                    username: '%env(ERP_API_OAUTH_USERNAME)%'
                    password: '%env(ERP_API_OAUTH_PASSWORD)%'
                    #scope: "administration"
                    grant_type: "Sainsburys\\Guzzle\\Oauth2\\GrantType\\PasswordCredentials"
                    auth_location: 'body'
                    persistent: true

Curl options defined for the client (erp) are not used by the plugin.
For example, in this configuration, "verify: false" is not used by the OAuth2 plugin.

Is there a solution for that ?

from guzzlebundleoauth2plugin.

gregurco commented on June 18, 2024

Hello @adpeyre

Sorry for late response. You described interesting case, but I'm not sure we have to apply all configurations from main client to the client used for authorization. I will think about that. As a quick solution you can check how client for authorization is defined: https://github.com/gregurco/GuzzleBundleOAuth2Plugin/blob/master/src/GuzzleBundleOAuth2Plugin.php#L69

You can easy redefine in your project this service with any configuration you want.

from guzzlebundleoauth2plugin.

Recommend Projects