HTTPS request avoiding CORS with authentication and custom/self-signed certificate

Developers: Plugin & API
1

In my plugin I need to query a REST API, which runs on a CORS sensitive server with self-signed certificate. Re quest need to be authenticated.

  1. With general typescript means I collide with CORS.
  2. Implementing a local proxy in the plugin crashes with a strange require_stream is not a function error for express.
  3. For the probably best and indented way with Obsidian’s requestUrl method I do not find a way to provide the custom cert. Is there an undocumented arg, a way to apply a custom httpsAgent or any other hack?

Any help, especially with option 3 is very much appreciated.

thx

2

Really no answer here?

Let’s simplify: How to let requestUrl use a self-signed certificate? (in pem file or Windows cert store)

2 Likes
3

It would be very helpful if the requestUrl API provided an option to disable TLS certificate validation (for example, for development or internal/self-hosted services with self-signed certificates).
I understand the security concerns, but having an explicit opt-in flag (like ignoreTls: true ) would make development and testing much easier in some scenarios.
Of course, it could be disabled by default and show a warning if used.

1 Like