diff --git a/DependencyInjection/ABELkeycloakBearerOnlyAdapterExtension.php b/DependencyInjection/ABELkeycloakBearerOnlyAdapterExtension.php
index df65028..a568b33 100644
--- a/DependencyInjection/ABELkeycloakBearerOnlyAdapterExtension.php
+++ b/DependencyInjection/ABELkeycloakBearerOnlyAdapterExtension.php
@@ -24,6 +24,7 @@ class ABELkeycloakBearerOnlyAdapterExtension extends Extension
$definition->replaceArgument(1, $config['realm']);
$definition->replaceArgument(2, $config['client_id']);
$definition->replaceArgument(3, $config['client_secret']);
+ $definition->replaceArgument(4, $config['ssl_verification']);
}
public function getAlias()
diff --git a/DependencyInjection/Configuration.php b/DependencyInjection/Configuration.php
index 4e799b7..0439fc4 100644
--- a/DependencyInjection/Configuration.php
+++ b/DependencyInjection/Configuration.php
@@ -31,6 +31,10 @@ class Configuration implements ConfigurationInterface
->scalarNode("client_secret")
->isRequired()
->cannotBeEmpty()
+ ->end()
+ ->scalarNode('ssl_verification')
+ ->defaultFalse()
+ ->treatNullLike(false)
->end();
return $treeBuilder;
diff --git a/Resources/config/services.xml b/Resources/config/services.xml
index ce130b6..4675f42 100644
--- a/Resources/config/services.xml
+++ b/Resources/config/services.xml
@@ -17,6 +17,7 @@
+
diff --git a/Security/User/KeycloakBearerUserProvider.php b/Security/User/KeycloakBearerUserProvider.php
index 9403093..1391d97 100644
--- a/Security/User/KeycloakBearerUserProvider.php
+++ b/Security/User/KeycloakBearerUserProvider.php
@@ -28,6 +28,10 @@ class KeycloakBearerUserProvider implements UserProviderInterface
* @var string
*/
private $client_secret;
+ /**
+ * @var mixed
+ */
+ private $sslVerification;
/**
* KeycloakBearerUserProvider constructor.
@@ -36,12 +40,13 @@ class KeycloakBearerUserProvider implements UserProviderInterface
* @param string $client_id
* @param string $client_secret
*/
- public function __construct(string $issuer, string $realm, string $client_id, string $client_secret)
+ public function __construct(string $issuer, string $realm, string $client_id, string $client_secret, $sslVerification)
{
$this->issuer = $issuer;
$this->realm = $realm;
$this->client_id = $client_id;
$this->client_secret = $client_secret;
+ $this->sslVerification = $sslVerification;
}
/**
@@ -71,6 +76,7 @@ class KeycloakBearerUserProvider implements UserProviderInterface
'http' => '', // Use this proxy with "http"
'https' => '', // Use this proxy with "https",
],
+ 'verify' => $this->sslVerification,
'http_errors' => false
]);