fix: make WebID profile fetch respect NODE_TLS_REJECT_UNAUTHORIZED in tests

从 lib/webid/lib/get.mjs 开始，检查其中的内部 fetch 调用和 HTTPS 处理。然后移除其 describe.skip 并运行 test/integration/acl-tls-test.mjs；当 WebID-TLS 集成测试在 NODE_TLS_REJECT_UNAUTHORIZED=0 下通过，同时正常的证书验证保持不变时，即表示完成。

Problem

The WebID-TLS integration tests timeout because the internal fetch() in lib/webid/lib/get.mjs doesn't respect NODE_TLS_REJECT_UNAUTHORIZED=0.

When verifying a WebID certificate, the server fetches the user's profile (e.g., https://tim.localhost:7777/profile/card#me). In tests, this URL uses a self-signed certificate that the internal fetch rejects.

Simplest Fix (~5 lines)

Modify lib/webid/lib/get.mjs to use an HTTPS agent that respects the environment variable:

import fetch from 'node-fetch'
import https from 'https'
import { URL } from 'url'

// Respect NODE_TLS_REJECT_UNAUTHORIZED for testing with self-signed certs
const agent = process.env.NODE_TLS_REJECT_UNAUTHORIZED === '0'
  ? new https.Agent({ rejectUnauthorized: false })
  : undefined

export default function get (webid, callback) {
  // ... existing code ...
  fetch(uri.href, { method: 'GET', headers, agent })
  // ...
}

Why This Works

• In production: NODE_TLS_REJECT_UNAUTHORIZED is not set, so normal cert validation applies
• In tests: The env var is already set by the test runner (cross-env NODE_TLS_REJECT_UNAUTHORIZED=0)
• No changes needed to test infrastructure or certificates

After This Fix

Remove describe.skip from test/integration/acl-tls-test.mjs and the tests should pass.

Related

• #1841 - Original tracking issue
• #1842 - Documentation PR explaining the issue