Package org.keycloak.services.x509

Interface X509ClientCertificateLookup

All Superinterfaces:

org.keycloak.provider.Provider

All Known Implementing Classes:

AbstractClientCertificateFromHttpHeadersLookup, ApacheProxySslClientCertificateLookup, DefaultClientCertificateLookup, EnvoyProxySslClientCertificateLookup, HaProxySslClientCertificateLookup, NginxProxySslClientCertificateLookup, NginxProxyTrustedClientCertificateLookup, Rfc9440ClientCertificateLookup, TraefikProxySslClientCertificateLookup

public interface X509ClientCertificateLookup
extends org.keycloak.provider.Provider

Since:

3/26/2017

Version:

$Revision: 1 $

Author:

Peter Nalyvayko

Method Summary

Modifier and Type	Method	Description
X509Certificate[]	getCertificateChain(org.keycloak.http.HttpRequest httpRequest)	Returns a client certificate, and optionally any certificates in the certificate chain.

Methods inherited from interface org.keycloak.provider.Provider

close

Method Details

getCertificateChain

X509Certificate[] getCertificateChain(org.keycloak.http.HttpRequest httpRequest)
                               throws GeneralSecurityException

Returns a client certificate, and optionally any certificates in the certificate chain.

IMPORTANT: implementations should ensure that the source of the certificate is trusted. See for example the HttpRequest.isProxyTrusted() method.

Returns:

Throws:

GeneralSecurityException