Namespace Kuestenlogik.Bowire.Net
Classes
- BowireHttpClientFactory
Builds an HttpClient whose certificate validation callback consults LocalhostCertTrust on every request. Lets HttpClient- based protocol plugins (REST, GraphQL, SSE, MCP, OData) opt into the same loopback-cert relaxation that SignalR / WebSocket already use, without each plugin re-implementing the validation-callback dance.
Defence in depth — the relaxed callback only returns
truewhen both (a) the OS trust check failed *and* (b) IsTrustedFor(IConfiguration?, string, string) returns true for the request URL. A misconfigured production host where `Bowire:TrustLocalhostCert=true` was set against a non-loopback URL still validates strictly.