pass HTTPX client config

Author: Kilo59

fastapi_azure_auth/openid_config.py

@@ -1,6 +1,8 @@
 import logging
+import ssl
 from datetime import datetime, timedelta
 from typing import TYPE_CHECKING, Any, Dict, List, Optional
+from typing import TYPE_CHECKING, Any, Dict, List, NotRequired, Optional, TypedDict
 
 import jwt
 from fastapi import HTTPException, status
@@ -12,19 +14,27 @@
 log = logging.getLogger('fastapi_azure_auth')
 
 
+class HttpClientConfig(TypedDict):
+    verify: NotRequired[ssl.SSLContext]
+
+
 class OpenIdConfig:
     def __init__(
         self,
         tenant_id: Optional[str] = None,
         multi_tenant: bool = False,
         app_id: Optional[str] = None,
         config_url: Optional[str] = None,
+        http_client_config: Optional[HttpClientConfig] = None,
     ) -> None:
         self.tenant_id: Optional[str] = tenant_id
         self._config_timestamp: Optional[datetime] = None
         self.multi_tenant: bool = multi_tenant
         self.app_id = app_id
         self.config_url = config_url
+        self.http_client_config: HttpClientConfig = (
+            http_client_config or HttpClientConfig()
+        )
 
         self.authorization_endpoint: str
         self.signing_keys: dict[str, 'AllowedPublicKeys']
@@ -72,7 +82,7 @@ async def _load_openid_config(self) -> None:
         if self.app_id:
             config_url += f'?appid={self.app_id}'
 
-        async with AsyncClient(timeout=10) as client:
+        async with AsyncClient(timeout=10, **self.http_client_config) as client:
             log.info('Fetching OpenID Connect config from %s', config_url)
             openid_response = await client.get(config_url)
             openid_response.raise_for_status()