Skip to content

Add configurable SSLSocketFactory support for HTTPS connections#252

Closed
tanya732 wants to merge 4 commits into
masterfrom
sdk-gh-172
Closed

Add configurable SSLSocketFactory support for HTTPS connections#252
tanya732 wants to merge 4 commits into
masterfrom
sdk-gh-172

Conversation

@tanya732
Copy link
Copy Markdown
Contributor

Changes

  • Adds SSLSocketFactory support to UrlJwkProvider and JwkProviderBuilder, allowing users to configure TLS version, custom trust stores, and mutual TLS (mTLS) for HTTPS connections to the JWKS endpoint
  • When not configured, the JVM's default SSL settings are used (fully backward compatible)
  • Follows the same pattern used by Google HTTP Client (googleapis/google-http-java-client) for URLConnection-based SSL configuration

@tanya732 tanya732 requested a review from a team as a code owner April 17, 2026 05:44
Copy link
Copy Markdown

@rmad17 rmad17 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!
Note: We should share a communication within the team that to support Java 8 for our users we need to allow support for TLS 1 and 1.1 which are deprecated versions.

@tanya732
Copy link
Copy Markdown
Contributor Author

tanya732 commented May 7, 2026

Closing in favor of #256, which introduces a pluggable JwksHttpClient interface that addresses this use case (along with others) in a more flexible way.

@tanya732 tanya732 closed this May 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants