Modifier and Type	Class and Description
public static class	ClientCertAuthenticationMechanism.Factory

Field Summary

Modifier and Type	Field and Description
public static final AuthenticationMechanismFactory	FACTORY
public static final String	FORCE_RENEGOTIATION
private final boolean	forceRenegotiation If we should force a renegotiation if client certs were not supplied.
private final IdentityManager	identityManager
private final String	name

Constructor Summary

Access	Constructor and Description
public	ClientCertAuthenticationMechanism()
public	ClientCertAuthenticationMechanism(boolean forceRenegotiation)
public	ClientCertAuthenticationMechanism(final String mechanismName)
public	ClientCertAuthenticationMechanism(final String mechanismName, boolean forceRenegotiation)
public	ClientCertAuthenticationMechanism(final String mechanismName, boolean forceRenegotiation, IdentityManager identityManager)

Method Summary

Modifier and Type	Method and Description
public AuthenticationMechanism.AuthenticationMechanismOutcome	authenticate(final HttpServerExchange The exchange exchange, final SecurityContext securityContext) Implements io.undertow.security.api.AuthenticationMechanism.authenticate. Perform authentication of the request.
private IdentityManager	getIdentityManager(SecurityContext securityContext)
private Certificate[]	getPeerCertificates(final HttpServerExchange exchange, SSLSessionInfo sslSession, SecurityContext securityContext)
public AuthenticationMechanism.ChallengeResult	sendChallenge(HttpServerExchange The exchange exchange, SecurityContext The security context securityContext) Implements io.undertow.security.api.AuthenticationMechanism.sendChallenge. Send an authentication challenge to the remote client.

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

FACTORY	back to summary
public static final AuthenticationMechanismFactory FACTORY

FORCE_RENEGOTIATION	back to summary
public static final String FORCE_RENEGOTIATION

forceRenegotiation	back to summary
private final boolean forceRenegotiation If we should force a renegotiation if client certs were not supplied. `true` by default

identityManager	back to summary
private final IdentityManager identityManager

name	back to summary
private final String name

Constructor Detail

ClientCertAuthenticationMechanism	back to summary
public ClientCertAuthenticationMechanism()

ClientCertAuthenticationMechanism	back to summary
public ClientCertAuthenticationMechanism(boolean forceRenegotiation)

ClientCertAuthenticationMechanism	back to summary
public ClientCertAuthenticationMechanism(final String mechanismName)

ClientCertAuthenticationMechanism	back to summary
public ClientCertAuthenticationMechanism(final String mechanismName, boolean forceRenegotiation)

ClientCertAuthenticationMechanism	back to summary
public ClientCertAuthenticationMechanism(final String mechanismName, boolean forceRenegotiation, IdentityManager identityManager)

Method Detail

authenticate	back to summary
public AuthenticationMechanism.AuthenticationMechanismOutcome authenticate(final HttpServerExchange exchange, final SecurityContext securityContext) Implements io.undertow.security.api.AuthenticationMechanism.authenticate. Doc from io.undertow.security.api.AuthenticationMechanism.authenticate. Perform authentication of the request. Any potentially blocking work should be performed in the handoff executor provided Parameters exchange:HttpServerExchange The exchange

authenticate

back to summary

public AuthenticationMechanism.AuthenticationMechanismOutcome authenticate(final HttpServerExchange exchange, final SecurityContext securityContext)

Implements io.undertow.security.api.AuthenticationMechanism.authenticate.

Doc from io.undertow.security.api.AuthenticationMechanism.authenticate.

Perform authentication of the request. Any potentially blocking work should be performed in the handoff executor provided

Parameters

exchange:HttpServerExchange: The exchange

getIdentityManager	back to summary
private IdentityManager getIdentityManager(SecurityContext securityContext) Annotations @SuppressWarnings:deprecation

getPeerCertificates	back to summary
private Certificate[] getPeerCertificates(final HttpServerExchange exchange, SSLSessionInfo sslSession, SecurityContext securityContext) throws SSLPeerUnverifiedException

sendChallenge back to summary

sendChallenge	back to summary
public AuthenticationMechanism.ChallengeResult sendChallenge(HttpServerExchange exchange, SecurityContext securityContext) Implements io.undertow.security.api.AuthenticationMechanism.sendChallenge. Doc from io.undertow.security.api.AuthenticationMechanism.sendChallenge. Send an authentication challenge to the remote client. The individual mechanisms should update the response headers and body of the message as appropriate however they should not set the response code, instead that should be indicated in the `ChallengeResult` and the most appropriate overall response code will be selected. This method should not return `null`. Parameters exchange:HttpServerExchange The exchange securityContext:SecurityContext The security context Returns:AuthenticationMechanism.ChallengeResult A `ChallengeResult` indicating if a challenge was sent and the desired response code. Annotations @Override

public AuthenticationMechanism.ChallengeResult sendChallenge(HttpServerExchange exchange, SecurityContext securityContext)

Implements io.undertow.security.api.AuthenticationMechanism.sendChallenge.

Doc from io.undertow.security.api.AuthenticationMechanism.sendChallenge.

Send an authentication challenge to the remote client.

The individual mechanisms should update the response headers and body of the message as appropriate however they should not set the response code, instead that should be indicated in the ChallengeResult and the most appropriate overall response code will be selected. This method should not return null.

Parameters

exchange:HttpServerExchange: The exchange
securityContext:SecurityContext: The security context

Returns:AuthenticationMechanism.ChallengeResult

A ChallengeResult indicating if a challenge was sent and the desired response code.

Annotations

@Override

io.undertow.security.impl back to summary

public final Class ClientCertAuthenticationMechanism.Factory

Class Inheritance

extends Object
implements AuthenticationMechanismFactory

java.lang.Object
io.undertow.security.impl.ClientCertAuthenticationMechanism.Factory

All Implemented Interfaces

io.undertow.security.api.AuthenticationMechanismFactory

Constructor Summary

Access	Constructor and Description
public	Factory(IdentityManager identityManager) Deprecated
public	Factory()

Method Summary

Modifier and Type	Method and Description
public AuthenticationMechanism	create(String The name under which this factory was registered mechanismName, IdentityManager the IdentityManager instance asscociated with the deployment identityManager, FormParserFactory Parser to create a form data parser for a given request. formParserFactory, Map<String, String> The properties properties) Overrides default io.undertow.security.api.AuthenticationMechanismFactory.create. Creates an authentication mechanism that needs access to the deployment IdentityManager and specified properties

Modifier and Type

Method and Description

public AuthenticationMechanism

create(String

The name under which this factory was registered

mechanismName, IdentityManager

the IdentityManager instance asscociated with the deployment

identityManager, FormParserFactory

Parser to create a form data parser for a given request.

formParserFactory, Map<String, String>

The properties

properties)

Overrides default io.undertow.security.api.AuthenticationMechanismFactory.create.

Creates an authentication mechanism that needs access to the deployment IdentityManager and specified properties

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Constructor Detail

Factory	back to summary
public Factory(IdentityManager identityManager) Deprecated Annotations @Deprecated

Factory	back to summary
public Factory()

Method Detail

create	back to summary
public AuthenticationMechanism create(String mechanismName, IdentityManager identityManager, FormParserFactory formParserFactory, Map<String, String> properties) Overrides default io.undertow.security.api.AuthenticationMechanismFactory.create. Doc from io.undertow.security.api.AuthenticationMechanismFactory.create. Creates an authentication mechanism that needs access to the deployment IdentityManager and specified properties Parameters mechanismName:String The name under which this factory was registered identityManager:IdentityManager the IdentityManager instance asscociated with the deployment formParserFactory:FormParserFactory Parser to create a form data parser for a given request. properties:Map<String, String> The properties Returns:AuthenticationMechanism The mechanism Annotations @Override

create

back to summary

public AuthenticationMechanism create(String mechanismName, IdentityManager identityManager, FormParserFactory formParserFactory, Map<String, String> properties)

Overrides default io.undertow.security.api.AuthenticationMechanismFactory.create.

Doc from io.undertow.security.api.AuthenticationMechanismFactory.create.

Creates an authentication mechanism that needs access to the deployment IdentityManager and specified properties

Parameters

mechanismName:String: The name under which this factory was registered
identityManager:IdentityManager: the IdentityManager instance asscociated with the deployment
formParserFactory:FormParserFactory: Parser to create a form data parser for a given request.
properties:Map<String, String>: The properties

Returns:AuthenticationMechanism

The mechanism

Annotations

@Override

public Class ClientCertAuthenticationMechanism

Nested and Inner Type Summary

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail

public final Class ClientCertAuthenticationMechanism.Factory

Constructor Summary

Method Summary

Constructor Detail

Method Detail