mirror of
https://github.com/sol1/rustguac.git
synced 2026-09-10 09:35:45 +00:00
2e046ea4a8
Switch reqwest from rustls-tls-webpki-roots to rustls-tls-native-roots so the OS trust store is used by default — private CAs installed system-wide now work without extra config. Add ca_cert and tls_skip_verify options to [oidc] for environments where the system store isn't available or for debugging TLS issues. Improve OIDC discovery error formatting to surface the actual cause (issuer mismatch, TLS failure, etc.) instead of opaque "Request failed". Closes #94