org.apache.nifi.web.security.x509

Class X509IdentityProvider

java.lang.Object

org.apache.nifi.web.security.x509.X509IdentityProvider

public class X509IdentityProvider
extends Object

Identity provider for extract the authenticating a ServletRequest with a X509Certificate.

Field Summary

Fields

Modifier and Type	Field and Description
private X509CertificateValidator	certificateValidator
private String	issuer
private static org.slf4j.Logger	logger
private org.springframework.security.web.authentication.preauth.x509.X509PrincipalExtractor	principalExtractor

Constructor Summary

Constructors

Constructor and Description
X509IdentityProvider()

Method Summary

Modifier and Type	Method and Description
AuthenticationResponse	authenticate(X509Certificate[] certificates) Authenticates the specified request by checking certificate validity.
void	setCertificateValidator(X509CertificateValidator certificateValidator)
void	setPrincipalExtractor(org.springframework.security.web.authentication.preauth.x509.X509PrincipalExtractor principalExtractor)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

private static final org.slf4j.Logger logger

issuer

private final String issuer

certificateValidator

private X509CertificateValidator certificateValidator

principalExtractor

private org.springframework.security.web.authentication.preauth.x509.X509PrincipalExtractor principalExtractor

Constructor Detail

X509IdentityProvider

public X509IdentityProvider()

Method Detail

authenticate

public AuthenticationResponse authenticate(X509Certificate[] certificates)
                                    throws IllegalArgumentException

Authenticates the specified request by checking certificate validity.

Parameters:

certificates - the client certificates

Returns:

an authentication response

Throws:

IllegalArgumentException - the request did not contain a valid certificate (or no certificate)

setCertificateValidator

public void setCertificateValidator(X509CertificateValidator certificateValidator)

setPrincipalExtractor

public void setPrincipalExtractor(org.springframework.security.web.authentication.preauth.x509.X509PrincipalExtractor principalExtractor)