René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Enable WebID-TLS integration tests (fix self-signed cert verification loop)","articleBody":"## Summary\n\nIn October 2019, WebID-TLS tests were disabled with `describe.skip()` (commit `778095ad`). The authentication code still works - just the tests are skipped and CI lacks DNS setup.\n\n**Fix size: ~10 lines changed.**\n\n## The Bug\n\n```javascript\n// Added Oct 29, 2019 by jaxoncreed\ndescribe.skip('ACL with WebID+TLS', function () {  // \u003c-- this .skip\n```\n\nThe comment says \"TLS is currently broken\" but the code isn't broken - the tests just need `tim.localhost` to resolve to `127.0.0.1`.\n\n## The Fix\n\n**1. Remove 5x `.skip`** from `test/integration/acl-tls-test.mjs`:\n- Line 67, 134, 571, 616, 946\n\n**2. Add 4 lines to CI** (`.github/workflows/ci.yml`):\n```yaml\n- name: Setup hosts for TLS tests\n  run: |\n    echo \"127.0.0.1 tim.localhost\" | sudo tee -a /etc/hosts\n    echo \"127.0.0.1 nicola.localhost\" | sudo tee -a /etc/hosts\n```\n\nDone.\n\n## Verification\n\nThe code works today:\n- Server starts with `--auth tls` ✅\n- Responds to requests ✅\n- Test certificates match test profiles ✅\n- `cert:modulus` in profile matches cert ✅\n\n## Why It Matters\n\n- README still advertises `--auth tls` support\n- Solid spec requires OIDC, doesn't forbid TLS\n- Server-to-server, CLI, IoT use cases need non-browser auth\n- W3C LWS working group discussing enterprise mTLS needs ([LWS-UCS #40](https://github.com/w3c-lws/lws-ucs/issues/40))\n\n## References\n\n- Commit that introduced skip: `778095ad` (Oct 29, 2019)\n- PR where TimBL approved TLS+OIDC coexistence: #650","author":{"url":"https://github.com/melvincarvalho","@type":"Person","name":"melvincarvalho"},"datePublished":"2026-01-08T22:42:50.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":2},"url":"https://github.com/1841/node-solid-server/issues/1841"}