Package net.devh.boot.grpc.server.security.authentication

Class X509CertificateAuthenticationProvider

java.lang.Object

net.devh.boot.grpc.server.security.authentication.X509CertificateAuthenticationProvider

All Implemented Interfaces:

AuthenticationProvider

public class X509CertificateAuthenticationProvider
extends Object
implements AuthenticationProvider

An AuthenticationProvider for X509Certificates. This provider only supports X509CertificateAuthentications.

Field Summary

Fields

Modifier and Type	Field	Description
static final Function<X509CertificateAuthentication,String>	CN_USERNAME_EXTRACTOR	The default way to extract the username from an Authentication by using the CN.
static final Function<Authentication,String>	FAIL_FALLBACK	A fallback that will fail to extract the username and will return null.
static final Function<Authentication,String>	PRINCIPAL_USERNAME_EXTRACTOR	The uses the name of the principal way to extract the username from an Authentication.

Constructor Summary

Constructors

Constructor	Description
X509CertificateAuthenticationProvider(Function<? super X509CertificateAuthentication,String> usernameExtractor, UserDetailsService userDetailsService)	Creates a new X509CertificateAuthenticationProvider, which uses the given Function to extract the username and uses the given UserDetailsService to lookup the user.
X509CertificateAuthenticationProvider(UserDetailsService userDetailsService)	Creates a new X509CertificateAuthenticationProvider, which uses the default way (via CN) to extract the username and uses the given UserDetailsService to lookup the user.

Method Summary

Modifier and Type	Method	Description
Authentication	authenticate(Authentication authentication)
static Function<X509CertificateAuthentication,String>	patternExtractor(String key, Function<? super X509CertificateAuthentication,String> fallback)	Creates a new case-insensitive pattern extractor with the given pattern.
boolean	supports(Class<?> authentication)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

PRINCIPAL_USERNAME_EXTRACTOR

public static final Function<Authentication,String> PRINCIPAL_USERNAME_EXTRACTOR

The uses the name of the principal way to extract the username from an Authentication.

CN_USERNAME_EXTRACTOR

public static final Function<X509CertificateAuthentication,String> CN_USERNAME_EXTRACTOR

The default way to extract the username from an Authentication by using the CN.

FAIL_FALLBACK

public static final Function<Authentication,String> FAIL_FALLBACK

A fallback that will fail to extract the username and will return null. The null will later be converted to a UsernameNotFoundException.

Constructor Details

X509CertificateAuthenticationProvider

public X509CertificateAuthenticationProvider(UserDetailsService userDetailsService)

Creates a new X509CertificateAuthenticationProvider, which uses the default way (via CN) to extract the username and uses the given UserDetailsService to lookup the user.

Parameters:

userDetailsService - The user details service to use.

X509CertificateAuthenticationProvider

public X509CertificateAuthenticationProvider(Function<? super X509CertificateAuthentication,String> usernameExtractor,
 UserDetailsService userDetailsService)

Creates a new X509CertificateAuthenticationProvider, which uses the given Function to extract the username and uses the given UserDetailsService to lookup the user.

Parameters:

usernameExtractor - The username extractor to use. The function should return null, if the username is missing.

userDetailsService - The user details service to use.

Method Details

patternExtractor

public static Function<X509CertificateAuthentication,String> patternExtractor(String key,
 Function<? super X509CertificateAuthentication,String> fallback)

Creates a new case-insensitive pattern extractor with the given pattern.

Parameters:

key - The case insensitive key to use (Example: 'CN').

fallback - The fallback function to use if the key was not present in the subject.

Returns:

The newly created extractor.

authenticate

public Authentication authenticate(Authentication authentication)
                            throws AuthenticationException

Specified by:

authenticate in interface AuthenticationProvider

Throws:

AuthenticationException

supports

public boolean supports(Class<?> authentication)

Specified by:

supports in interface AuthenticationProvider