From a0dee43a37ce4831f58f221a24e043909eaa58d4 Mon Sep 17 00:00:00 2001
From: Dawn <jiaxin.duan@psi.ch>
Date: Wed, 10 Jun 2026 14:23:28 +0200
Subject: [PATCH] load cacert path from funtion parameters

---
 src/aare/gui/auth.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/aare/gui/auth.py b/src/aare/gui/auth.py
index 45d15f25..30c3e923 100644
--- a/src/aare/gui/auth.py
+++ b/src/aare/gui/auth.py
@@ -20,6 +20,7 @@ def auth(base_url: str | None, cert_path: str | None) -> str:
     # Single call: Kerberos SPNEGO through Apache, which proxies to the DAQ server.
     # Apache injects X-Remote-User; the DAQ server reads it from the localhost-proxied request.
     url = f"{base_url}/token"
+    cacert = f"{cert_path}"
     try:
         token_result = subprocess.run(
             ['curl', '-s', '--cacert', CACERT,