fix: use delay client certificate mode

Aguafrommars · May 24, 2022 · d3ac7df · d3ac7df
1 parent f10f124
commit d3ac7df
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 3 deletions.
diff --git a/sample/Aguacongas.TheIdServer.MtlsSample/Program.cs b/sample/Aguacongas.TheIdServer.MtlsSample/Program.cs
@@ -27,7 +27,7 @@ async Task<TokenResponse> RequestTokenAsync()
 
     if (response.IsError)
     {
-        throw new Exception(response.Error);
+        throw response.Exception ?? new InvalidOperationException(response.Error);
     }
 
     return response;

diff --git a/src/Aguacongas.TheIdServer.Shared/Program.cs b/src/Aguacongas.TheIdServer.Shared/Program.cs
@@ -38,7 +38,7 @@
     // when mutual TLS is enable the web host must receive client certificate
     builder.WebHost.ConfigureKestrel(kestrel =>
     {
-        kestrel.ConfigureHttpsDefaults(https => https.ClientCertificateMode = ClientCertificateMode.AllowCertificate);
+        kestrel.ConfigureHttpsDefaults(https => https.ClientCertificateMode = ClientCertificateMode.DelayCertificate);
     });
 }
 
@@ -60,5 +60,4 @@
 });
 app.UseTheIdServer(app.Environment, configuration);
 
-
 app.Run();