Add OPENID_HTTP_VERIFY_SSL_PEER env var to disable ssl cert verification

Closes #479

.env.example

@@ -252,6 +252,9 @@ WEBAUTHN_USER_VERIFICATION=preferred
 # OPENID_USERINFO_URL=
 # OPENID_CLIENT_ID=
 # OPENID_CLIENT_SECRET=
+# OPENID_HTTP_VERIFY_SSL_PEER=true
+# Can also be the path to a custom certificate on disk, i.e
+# OPENID_HTTP_VERIFY_SSL_PEER=/path/to/cert.pem
 
 # GITHUB_CLIENT_ID=
 # GITHUB_CLIENT_SECRET=

Dockerfile

@@ -227,6 +227,10 @@ ENV \
     # OPENID_USERINFO_URL= \
     # OPENID_CLIENT_ID= \
     # OPENID_CLIENT_SECRET= \
+    # OPENID_HTTP_VERIFY_SSL_PEER=true \
+    # Can also be the path to a custom certificate on disk, i.e
+    # OPENID_HTTP_VERIFY_SSL_PEER=/path/to/cert.pem \
+    #
     # GITHUB_CLIENT_ID= \
     # GITHUB_CLIENT_SECRET= \
     # Use this setting to declare trusted proxied.

bootstrap/app.php

@@ -15,7 +15,7 @@ if (! function_exists('envUnlessEmpty')) {
     /**
      * @return mixed|null
      */
-    function envUnlessEmpty(string $key, string|int|bool|float|null $default = null)
+    function envUnlessEmpty(string $key, string|int|bool|float|array|null $default = null)
     {
         $result = env($key, $default);
         if ('' === $result) {

config/services.php

@@ -28,6 +28,9 @@ return [
         'client_id' => env('OPENID_CLIENT_ID'),
         'client_secret' => env('OPENID_CLIENT_SECRET'),
         'redirect' => env('APP_URL') . '/socialite/callback/openid',
+        'guzzle' => [
+            'verify' => envUnlessEmpty('OPENID_HTTP_VERIFY_SSL_PEER', true), // https://docs.guzzlephp.org/en/stable/request-options.html#verify
+        ]
     ],
 
     'github' => [

docker/docker-compose.yml

@@ -124,6 +124,10 @@ services:
       # - OPENID_USERINFO_URL=
       # - OPENID_CLIENT_ID=
       # - OPENID_CLIENT_SECRET=
+      # - OPENID_HTTP_VERIFY_SSL_PEER=true
+      # Can also be the path to a custom certificate on disk, i.e
+      # - OPENID_HTTP_VERIFY_SSL_PEER=/path/to/cert.pem
+      #
       # - GITHUB_CLIENT_ID=
       # - GITHUB_CLIENT_SECRET=
       # Use this setting to declare trusted proxied.