Interface ClientCertificateValidator

  • All Known Implementing Classes:
    ClientCertificateExpiryValidator
    Functional Interface:
    This is a functional interface and can therefore be used as the assignment target for a lambda expression or method reference.

    @FunctionalInterface
    public interface ClientCertificateValidator
    The Client Certificate Validator API that can be used to perform additional checks on the presented Client certificate. When specified, this method is executed for each request so make sure the implementation considers some kind of caching for checks that take some considerable time.
    • Method Detail

      • isValid

        boolean isValid​(Subject subject,
                        X500Principal principal,
                        X509Certificate certificate)
        Parameters:
        subject - The Subject object for the authentication request.
        principal - The Principal object from the user certificate.
        certificate - The user certificate that was presented in the request.
        Returns:
        true when the Client Certificate Validation was successful and request can continue. In the case of false, a LoginException will be thrown.