org.picketlink.authentication.web

Class ClientCertAuthenticationScheme

java.lang.Object

org.picketlink.authentication.web.ClientCertAuthenticationScheme

All Implemented Interfaces:

HTTPAuthenticationScheme

public class ClientCertAuthenticationScheme
extends Object
implements HTTPAuthenticationScheme

An implementation of HTTPAuthenticationScheme that supports the Servlet Specification CLIENT-CERT Authentication Scheme

When using this authentication scheme, the container must be properly configured to validate client certificates.

Author:

Anil Saldhana, Pedro Igor

Field Summary

Fields

Modifier and Type	Field and Description
static String	X509_CLIENT_CERT_REQUEST_ATTRIBUTE

Constructor Summary

Constructors

Constructor and Description
ClientCertAuthenticationScheme(FilterConfig config)

Method Summary

Methods

Modifier and Type	Method and Description
void	challengeClient(HttpServletRequest request, HttpServletResponse response) Challenges the client if no credentials were supplied or the credentials were not extracted in order to continue with the authentication.
void	extractCredential(HttpServletRequest request, DefaultLoginCredentials creds) Extracts the credentials from the given HttpServletRequest and populate the DefaultLoginCredentials with them.
boolean	postAuthentication(HttpServletRequest request, HttpServletResponse response) Performs any post-authentication logic regarding of the authentication result.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

X509_CLIENT_CERT_REQUEST_ATTRIBUTE

public static final String X509_CLIENT_CERT_REQUEST_ATTRIBUTE

See Also:

Constant Field Values

Constructor Detail

ClientCertAuthenticationScheme

public ClientCertAuthenticationScheme(FilterConfig config)

Method Detail

extractCredential

public void extractCredential(HttpServletRequest request,
                     DefaultLoginCredentials creds)

Description copied from interface: HTTPAuthenticationScheme

Extracts the credentials from the given HttpServletRequest and populate the DefaultLoginCredentials with them.

Specified by:

extractCredential in interface HTTPAuthenticationScheme

challengeClient

public void challengeClient(HttpServletRequest request,
                   HttpServletResponse response)
                     throws IOException

Description copied from interface: HTTPAuthenticationScheme

Challenges the client if no credentials were supplied or the credentials were not extracted in order to continue with the authentication.

Specified by:

challengeClient in interface HTTPAuthenticationScheme

Throws:

IOException

postAuthentication

public boolean postAuthentication(HttpServletRequest request,
                         HttpServletResponse response)
                           throws IOException

Description copied from interface: HTTPAuthenticationScheme

Performs any post-authentication logic regarding of the authentication result.

Specified by:

postAuthentication in interface HTTPAuthenticationScheme

Returns:

true if the processing should continue, false if the processing should stop.

Throws:

IOException