fish.payara.security.client

Interface ClientCertificateValidator

Functional Interface:

This is a functional interface and can therefore be used as the assignment target for a lambda expression or method reference.

@FunctionalInterface
public interface ClientCertificateValidator

The Client Certificate Validator API that can be used to perform additional checks on the presented Client certificate. When specified, this method is executed for each request so make sure the implementation considers some kind of caching for checks that take some considerable time.

Method Summary

Modifier and Type	Method and Description
boolean	isValid(Subject subject, X500Principal principal, X509Certificate certificate)

Method Detail

isValid

boolean isValid(Subject subject,
                X500Principal principal,
                X509Certificate certificate)

Parameters:

subject - The Subject object for the authentication request.

principal - The Principal object from the user certificate.

certificate - The user certificate that was presented in the request.

Returns:

true when the Client Certificate Validation was successful and request can continue. In the case of false, a LoginException will be thrown.