Adds support for mutual TLS

Author: jonerickson

src/CallWebhookJob.php

@@ -33,6 +33,14 @@ class CallWebhookJob implements ShouldQueue
 
     public int $requestTimeout;
 
+    public ?string $cert = null;
+
+    public ?string $certPassword = null;
+
+    public ?string $sslKey = null;
+
+    public ?string $sslKeyPassword = null;
+
     public string $backoffStrategyClass;
 
     public ?string $signerClass = null;
@@ -132,14 +140,20 @@ protected function createRequest(array $body): Response
     {
         $client = $this->getClient();
 
-        return $client->request($this->httpVerb, $this->webhookUrl, array_merge([
+        return $client->request($this->httpVerb, $this->webhookUrl, array_merge(
+            [
             'timeout' => $this->requestTimeout,
             'verify' => $this->verifySsl,
             'headers' => $this->headers,
             'on_stats' => function (TransferStats $stats) {
                 $this->transferStats = $stats;
             },
-        ], $body, is_null($this->proxy) ? [] : ['proxy' => $this->proxy]));
+        ],
+            $body,
+            is_null($this->proxy) ? [] : ['proxy' => $this->proxy],
+            is_null($this->cert) ? [] : ['cert' => [$this->cert, $this->certPassword]],
+            is_null($this->sslKey) ? [] : ['ssl_key' => [$this->sslKey, $this->sslKeyPassword]]
+        ));
     }
 
     protected function shouldBeRemovedFromQueue(): bool

src/WebhookCall.php

@@ -117,6 +117,16 @@ public function maximumTries(int $tries): self
         return $this;
     }
 
+    public function mutualTls(string $cert, string $sslKey, ?string $certPassword = null, ?string $sslKeyPassword = null): self
+    {
+        $this->callWebhookJob->cert = $cert;
+        $this->callWebhookJob->certPassword = $certPassword;
+        $this->callWebhookJob->sslKey = $sslKey;
+        $this->callWebhookJob->sslKeyPassword = $sslKeyPassword;
+
+        return $this;
+    }
+
     public function useBackoffStrategy(string $backoffStrategyClass): self
     {
         if (! is_subclass_of($backoffStrategyClass, BackoffStrategy::class)) {

tests/CallWebhookJobTest.php

@@ -184,6 +184,40 @@ function baseGetRequest(array $overrides = []): array
         ->assertRequestsMade([$baseRequest]);
 });
 
+it('will use mutual TLS without passphrases', function () {
+    baseWebhook()
+        ->mutualTls('foobar', 'barfoo')
+        ->dispatch();
+
+    $baseRequest = baseRequest();
+
+    $baseRequest['options']['cert'] = ['foobar', null];
+    $baseRequest['options']['ssl_key'] = ['barfoo', null];
+
+    artisan('queue:work --once');
+
+    $this
+        ->testClient
+        ->assertRequestsMade([$baseRequest]);
+});
+
+it('will use mutual TLS with passphrases', function () {
+    baseWebhook()
+        ->mutualTls('foobar', 'barfoo', 'foobarpassword', 'barfoopassword')
+        ->dispatch();
+
+    $baseRequest = baseRequest();
+
+    $baseRequest['options']['cert'] = ['foobar', 'foobarpassword'];
+    $baseRequest['options']['ssl_key'] = ['barfoo', 'barfoopassword'];
+
+    artisan('queue:work --once');
+
+    $this
+        ->testClient
+        ->assertRequestsMade([$baseRequest]);
+});
+
 it('will use a proxy', function () {
     baseWebhook()
         ->useProxy('https://proxy.test')