Merge pull request #102 from thatch-health/mtls-basic

Add support for endpoints requiring mTLS with HTTP Basic Authentication

Author: nov

CHANGELOG.md

@@ -1,5 +1,7 @@
 ## [Unreleased]
 
+- add support for endpoints requiring mTLS with HTTP Basic Authentication
+
 ## [2.2.0] - 2022-10-11
 
 ### Changed

lib/rack/oauth2/client.rb

@@ -182,6 +182,16 @@ def authenticated_context_from(*args)
           )
           http_client.ssl.client_key = private_key
           http_client.ssl.client_cert = certificate
+        when :mtls_basic
+          http_client.ssl.client_key = private_key
+          http_client.ssl.client_cert = certificate
+          cred = Base64.strict_encode64 [
+            Util.www_form_url_encode(identifier),
+            Util.www_form_url_encode(secret)
+          ].join(':')
+          headers.merge!(
+            'Authorization' => "Basic #{cred}"
+          )
         else
           params.merge!(
             client_id: identifier,