org.eclipse.jetty.security.authentication
Class ClientCertAuthenticator

java.lang.Object
  org.eclipse.jetty.security.authentication.LoginAuthenticator
      org.eclipse.jetty.security.authentication.ClientCertAuthenticator

All Implemented Interfaces:

Authenticator

public class ClientCertAuthenticator
extends LoginAuthenticator

Version:

$Rev: 4793 $ $Date: 2009-03-19 00:00:01 +0100 (Thu, 19 Mar 2009) $

Nested Class Summary

Nested classes/interfaces inherited from interface org.eclipse.jetty.security.Authenticator

Authenticator.Configuration, Authenticator.Factory

Field Summary

Fields inherited from class org.eclipse.jetty.security.authentication.LoginAuthenticator

_identityService, _loginService

Constructor Summary

ClientCertAuthenticator()

Method Summary

String	getAuthMethod()
boolean	secureResponse(ServletRequest req, ServletResponse res, boolean mandatory, Authentication.User validatedUser)
Authentication	validateRequest(ServletRequest req, ServletResponse res, boolean mandatory) TODO what should happen if an insecure page is accessed without a client cert? Current code requires a client cert always but allows access to insecure pages if it is not recognized.

Methods inherited from class org.eclipse.jetty.security.authentication.LoginAuthenticator

getLoginService, setConfiguration

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ClientCertAuthenticator

public ClientCertAuthenticator()

Method Detail

getAuthMethod

public String getAuthMethod()

Returns:

The name of the authentication method

validateRequest

public Authentication validateRequest(ServletRequest req,
                                      ServletResponse res,
                                      boolean mandatory)
                               throws ServerAuthException

TODO what should happen if an insecure page is accessed without a client cert? Current code requires a client cert always but allows access to insecure pages if it is not recognized.

Parameters:

req - The request

res - The response

mandatory - True if authentication is mandatory.

Returns:

Throws:

ServerAuthException

secureResponse

public boolean secureResponse(ServletRequest req,
                              ServletResponse res,
                              boolean mandatory,
                              Authentication.User validatedUser)
                       throws ServerAuthException

Returns:

Throws:

ServerAuthException