How to use quirks?

[Lionstiger]

Hi,
I have been trying to setup a local development environment using phoenix and the phx_gen_oidcc tool using a local authentik server for oauth2. Still fairly new to elixir/phoenix so this is likely a very basic question.

mix phx.server fails to start with the error
TLS :client: In state :certify at ssl_handshake.erl:2136 generated CLIENT ALERT: Fatal - Bad Certificate
indicating that it requires a non selfsigned certs.
Discussion #276 seems to have the solution.

But i cant seem to find the right place/format to provide the allow_unsafe_http quirk.

My current relevant block of runtime.exs (where phx_gen_oidcc places the other config items):

config :argument, Oidcc,
  issuer: "https://localhost:9443/application/o/elixir-test/",
  client_id: "<client_id>",
  client_secret:   "<client_secret>",
  quirks: %{:allow_unsafe_http => true}

How/Where do i have to specify the allow_unsafe_http quirk for it to be used correctly?

[maennchen]

Currently that value is not read from the config. You'll have to supply it when starting the provider configuration.

However: The quirk allows the http protocol, not the https protocol with an unknown certificate. You'll have to configure the ssl options for that.

Have a look at:

• https://hexdocs.pm/oidcc/oidcc_provider_configuration_worker.html#t:opts/0
• https://hexdocs.pm/oidcc/oidcc_http_util.html#t:request_opts/0

You can see the quirks in use in the tests:

oidcc/test/oidcc_provider_configuration_SUITE.erl

Lines 119 to 125 in ebae4bd

	?assertMatch(
	{ok, {#oidcc_provider_configuration{}, _}},
	oidcc_provider_configuration:load_configuration(
	<<"https://login.microsoftonline.com/common/v2.0">>,
	#{quirks => #{allow_issuer_mismatch => true}}
	)
	),

[Lionstiger]

Can confirm that works.

provider_configuration_opts: %{
    :quirks => %{allow_unsafe_http: true}
}

both allow_unsafe_http and true are atoms but can be used without the : prefix.
Thanks for the tip!

[maennchen]

quirks is also an atom 😊

[Lionstiger]

yes, but i couldn't remove the : prefix, without causing an error, so i assumed the syntax requires the prefix.

[maennchen]

provider_configuration_opts: %{
    quirks: %{allow_unsafe_http: true}
}

%{atom: value} is equivalent to %{:atom => value}

[Lionstiger]

wow, so you just also have to remove the : after quirks. Thanks again for all the help!