Package org.keycloak.services.x509

Class DefaultClientCertificateLookup

java.lang.Object

org.keycloak.services.x509.DefaultClientCertificateLookup

All Implemented Interfaces:

org.keycloak.provider.Provider, X509ClientCertificateLookup

public class DefaultClientCertificateLookup
extends Object
implements X509ClientCertificateLookup

The provider retrieves a client certificate and the certificate chain (if any) from the incoming TLS connection.

Since:

3/26/2017

Version:

$Revision: 1 $

Author:

Peter Nalyvayko

Constructor Summary

Constructors

Constructor	Description
DefaultClientCertificateLookup()

Method Summary

Modifier and Type	Method	Description
void	close()
X509Certificate[]	getCertificateChain(org.keycloak.http.HttpRequest httpRequest)	Returns a client certificate, and optionally any certificates in the certificate chain.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

DefaultClientCertificateLookup

public DefaultClientCertificateLookup()

Method Details

close

public void close()

Specified by:

close in interface org.keycloak.provider.Provider

getCertificateChain

public X509Certificate[] getCertificateChain(org.keycloak.http.HttpRequest httpRequest)

Description copied from interface: X509ClientCertificateLookup

Returns a client certificate, and optionally any certificates in the certificate chain.

IMPORTANT: implementations should ensure that the source of the certificate is trusted. See for example the HttpRequest.isProxyTrusted() method.

Specified by:

getCertificateChain in interface X509ClientCertificateLookup

Returns: