fix: add mTLS cert loading to VssOAuthTokenHttpClient

dseth-linkedin · claude · dseth-linkedin · commit 559c3a50d026 · 2026-05-29T10:46:28.000-07:00
The OAuth token HTTP client creates its own HttpClientHandler without
loading client certificates. This breaks mTLS proxy auth for broker
session creation (IssuedTokenProvider → RawHttpMessageHandler path).

Co-Authored-By: Claude Opus 4.5 &lt;noreply@anthropic.com&gt;
diff --git a/.gitignore b/.gitignore
@@ -27,4 +27,4 @@ TestResults
 TestLogs
 .DS_Store
 .mono
-**/*.DotSettings.user
+**/*.DotSettings.useractions-runner-linux-x64-*.tar.gz
diff --git a/src/Sdk/WebApi/WebApi/OAuth/VssOAuthTokenHttpClient.cs b/src/Sdk/WebApi/WebApi/OAuth/VssOAuthTokenHttpClient.cs
@@ -124,6 +124,8 @@ private static HttpMessageHandler CreateMessageHandler(Uri requestUri)
                 messageHandler.UseProxy = true;
             }
 
+            VssHttpMessageHandler.ConfigureClientCertificates?.Invoke(messageHandler);
+
             if (requestUri.Scheme.Equals("https", StringComparison.OrdinalIgnoreCase) &&
                 VssClientHttpRequestSettings.Default.ClientCertificateManager != null &&
                 VssClientHttpRequestSettings.Default.ClientCertificateManager.ClientCertificates != null &&

Original file line number	Diff line number	Diff line change
`@@ -124,6 +124,8 @@ private static HttpMessageHandler CreateMessageHandler(Uri requestUri)`
`124`	`124`	`messageHandler.UseProxy = true;`
`125`	`125`	`}`
`126`	`126`
	`127`	`+ VssHttpMessageHandler.ConfigureClientCertificates?.Invoke(messageHandler);`
	`128`	`+`
`127`	`129`	`if (requestUri.Scheme.Equals("https", StringComparison.OrdinalIgnoreCase) &&`
`128`	`130`	`VssClientHttpRequestSettings.Default.ClientCertificateManager != null &&`
`129`	`131`	`VssClientHttpRequestSettings.Default.ClientCertificateManager.ClientCertificates != null &&`