@RefreshScope
@Component(value="x509CredentialsAuthenticationHandler")
public class X509CredentialsAuthenticationHandler
extends org.apereo.cas.authentication.handler.support.AbstractPreAndPostProcessingAuthenticationHandler
| Constructor and Description |
|---|
X509CredentialsAuthenticationHandler() |
| Modifier and Type | Method and Description |
|---|---|
protected org.apereo.cas.authentication.HandlerResult |
doAuthentication(org.apereo.cas.authentication.Credential credential) |
void |
init()
Init and ensure configuration is correct.
|
void |
setCheckKeyUsage(boolean checkKeyUsage) |
void |
setMaxPathLength(int maxPathLength) |
void |
setMaxPathLengthAllowUnspecified(boolean allowed) |
void |
setRequireKeyUsage(boolean requireKeyUsage) |
void |
setRevocationChecker(RevocationChecker checker)
Sets the component responsible for evaluating certificate revocation status for client
certificates presented to handler.
|
void |
setSubjectDnPattern(java.lang.String subjectDnPattern) |
void |
setTrustedIssuerDnPattern(java.lang.String trustedIssuerDnPattern) |
boolean |
supports(org.apereo.cas.authentication.Credential credential) |
authenticate, createHandlerResult, postAuthenticate, preAuthenticatepublic X509CredentialsAuthenticationHandler()
public boolean supports(org.apereo.cas.authentication.Credential credential)
@PostConstruct public void init()
protected org.apereo.cas.authentication.HandlerResult doAuthentication(org.apereo.cas.authentication.Credential credential)
throws java.security.GeneralSecurityException,
org.apereo.cas.authentication.PreventedException
doAuthentication in class org.apereo.cas.authentication.handler.support.AbstractPreAndPostProcessingAuthenticationHandlerjava.security.GeneralSecurityExceptionorg.apereo.cas.authentication.PreventedException@Autowired
public void setTrustedIssuerDnPattern(@Value(value="${cas.x509.authn.trusted.issuer.dnpattern:}")
java.lang.String trustedIssuerDnPattern)
@Autowired
public void setMaxPathLength(@Value(value="${cas.x509.authn.max.path.length:1}")
int maxPathLength)
maxPathLength - The maxPathLength to set.@Autowired
public void setMaxPathLengthAllowUnspecified(@Value(value="${cas.x509.authn.max.path.length.unspecified:false}")
boolean allowed)
allowed - Allow CA certs to have unlimited intermediate certs (default=false).@Autowired
public void setCheckKeyUsage(@Value(value="${cas.x509.authn.check.key.usage:false}")
boolean checkKeyUsage)
checkKeyUsage - The checkKeyUsage to set.@Autowired
public void setRequireKeyUsage(@Value(value="${cas.x509.authn.require.key.usage:false}")
boolean requireKeyUsage)
requireKeyUsage - The requireKeyUsage to set.@Autowired
public void setSubjectDnPattern(@Value(value="${cas.x509.authn.subject.dnpattern:.*}")
java.lang.String subjectDnPattern)
@Autowired(required=false)
public void setRevocationChecker(@Qualifier(value="x509RevocationChecker")
RevocationChecker checker)
checker - Revocation checker component.