org.picketlink.authentication.web

Class ClientCertAuthenticationScheme

java.lang.Object

org.picketlink.authentication.web.ClientCertAuthenticationScheme

All Implemented Interfaces:

HTTPAuthenticationScheme

public class ClientCertAuthenticationScheme
extends Object
implements HTTPAuthenticationScheme

An implementation of HTTPAuthenticationScheme that supports the Servlet Specification CLIENT-CERT Authentication Scheme

When using this authentication scheme, the container must be properly configured to validate client certificates.

Author:

Anil Saldhana, Pedro Igor

Field Summary

Fields

Modifier and Type	Field and Description
static String	X509_CLIENT_CERT_REQUEST_ATTRIBUTE

Constructor Summary

Constructors

Constructor and Description
ClientCertAuthenticationScheme(javax.servlet.FilterConfig config)

Method Summary

Methods

Modifier and Type	Method and Description
void	challengeClient(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response) Challenges the client if no credentials were supplied or the credentials were not extracted in order to continue with the authentication.
void	extractCredential(javax.servlet.http.HttpServletRequest request, DefaultLoginCredentials creds) Extracts the credentials from the given HttpServletRequest and populate the DefaultLoginCredentials with them.
boolean	postAuthentication(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response) Performs any post-authentication logic regarding of the authentication result.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

X509_CLIENT_CERT_REQUEST_ATTRIBUTE

public static final String X509_CLIENT_CERT_REQUEST_ATTRIBUTE

See Also:

Constant Field Values

Constructor Detail

ClientCertAuthenticationScheme

public ClientCertAuthenticationScheme(javax.servlet.FilterConfig config)

Method Detail

extractCredential

public void extractCredential(javax.servlet.http.HttpServletRequest request,
                     DefaultLoginCredentials creds)

Description copied from interface: HTTPAuthenticationScheme

Extracts the credentials from the given HttpServletRequest and populate the DefaultLoginCredentials with them.

Specified by:

extractCredential in interface HTTPAuthenticationScheme

challengeClient

public void challengeClient(javax.servlet.http.HttpServletRequest request,
                   javax.servlet.http.HttpServletResponse response)
                     throws IOException

Description copied from interface: HTTPAuthenticationScheme

Challenges the client if no credentials were supplied or the credentials were not extracted in order to continue with the authentication.

Specified by:

challengeClient in interface HTTPAuthenticationScheme

Throws:

IOException

postAuthentication

public boolean postAuthentication(javax.servlet.http.HttpServletRequest request,
                         javax.servlet.http.HttpServletResponse response)
                           throws IOException

Description copied from interface: HTTPAuthenticationScheme

Performs any post-authentication logic regarding of the authentication result.

Specified by:

postAuthentication in interface HTTPAuthenticationScheme

Returns:

true if the processing should continue, false if the processing should stop.

Throws:

IOException