Namespace Kuestenlogik.Bowire.Net

Classes

BowireHttpClientFactory

Builds an HttpClient whose certificate validation callback consults LocalhostCertTrust on every request. Lets HttpClient- based protocol plugins (REST, GraphQL, SSE, MCP, OData) opt into the same loopback-cert relaxation that SignalR / WebSocket already use, without each plugin re-implementing the validation-callback dance.

Defence in depth — the relaxed callback only returns true when both (a) the OS trust check failed *and* (b) IsTrustedFor(IConfiguration?, string, string) returns true for the request URL. A misconfigured production host where `Bowire:TrustLocalhostCert=true` was set against a non-loopback URL still validates strictly.