Class X509AuthenticationConfiguration


  • @EnableConfigurationProperties(org.apereo.cas.configuration.CasConfigurationProperties.class)
    @ConditionalOnFeatureEnabled(feature=X509)
    @AutoConfiguration
    public class X509AuthenticationConfiguration
    extends java.lang.Object
    Since:
    5.0.0
    • Method Summary

      All Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      org.apereo.cas.adaptors.x509.authentication.revocation.policy.RevocationPolicy allowRevocationPolicy()  
      org.apereo.cas.adaptors.x509.authentication.revocation.checker.RevocationChecker crlDistributionPointRevocationChecker​(org.apereo.cas.configuration.CasConfigurationProperties casProperties, org.apereo.cas.adaptors.x509.authentication.CRLFetcher crlFetcher, org.apereo.cas.adaptors.x509.authentication.revocation.policy.RevocationPolicy allowRevocationPolicy, org.apereo.cas.adaptors.x509.authentication.revocation.policy.RevocationPolicy thresholdExpiredCRLRevocationPolicy, org.apereo.cas.adaptors.x509.authentication.revocation.policy.RevocationPolicy denyRevocationPolicy)  
      org.apereo.cas.adaptors.x509.authentication.CRLFetcher crlFetcher​(org.apereo.cas.configuration.CasConfigurationProperties casProperties)  
      org.apereo.cas.adaptors.x509.authentication.revocation.policy.RevocationPolicy denyRevocationPolicy()  
      org.apereo.cas.adaptors.x509.authentication.revocation.checker.RevocationChecker noOpRevocationChecker()  
      org.apereo.cas.adaptors.x509.authentication.revocation.checker.RevocationChecker resourceCrlRevocationChecker​(org.apereo.cas.configuration.CasConfigurationProperties casProperties, org.springframework.context.ConfigurableApplicationContext applicationContext, org.apereo.cas.adaptors.x509.authentication.revocation.policy.RevocationPolicy allowRevocationPolicy, org.apereo.cas.adaptors.x509.authentication.revocation.policy.RevocationPolicy thresholdExpiredCRLRevocationPolicy, org.apereo.cas.adaptors.x509.authentication.revocation.policy.RevocationPolicy denyRevocationPolicy, org.apereo.cas.adaptors.x509.authentication.CRLFetcher crlFetcher)  
      org.apereo.cas.adaptors.x509.authentication.revocation.policy.RevocationPolicy thresholdExpiredCRLRevocationPolicy​(org.apereo.cas.configuration.CasConfigurationProperties casProperties)  
      org.apereo.cas.adaptors.x509.authentication.principal.X509AttributeExtractor x509AttributeExtractor​(org.apereo.cas.configuration.CasConfigurationProperties casProperties)  
      org.apereo.cas.authentication.AuthenticationEventExecutionPlanConfigurer x509AuthenticationEventExecutionPlanConfigurer​(org.apereo.cas.authentication.principal.PrincipalResolver x509SerialNumberPrincipalResolver, org.apereo.cas.authentication.principal.PrincipalResolver x509SerialNumberAndIssuerDNPrincipalResolver, org.apereo.cas.authentication.principal.PrincipalResolver x509SubjectPrincipalResolver, org.apereo.cas.authentication.principal.PrincipalResolver x509SubjectAlternativeNameUPNPrincipalResolver, org.apereo.cas.authentication.principal.PrincipalResolver x509SubjectAlternativeNameRFC822EmailPrincipalResolver, org.apereo.cas.authentication.principal.PrincipalResolver x509SubjectDNPrincipalResolver, org.apereo.cas.authentication.principal.PrincipalResolver x509CommonNameEDIPIPrincipalResolver, org.apereo.cas.configuration.CasConfigurationProperties casProperties, org.apereo.cas.authentication.AuthenticationHandler x509CredentialsAuthenticationHandler)  
      org.apereo.cas.authentication.principal.PrincipalResolver x509CommonNameEDIPIPrincipalResolver​(org.apereo.cas.configuration.CasConfigurationProperties casProperties, org.apereo.cas.authentication.principal.PrincipalFactory x509PrincipalFactory, org.apereo.cas.adaptors.x509.authentication.principal.X509AttributeExtractor x509AttributeExtractor, org.apereo.services.persondir.IPersonAttributeDao attributeRepository)  
      org.apereo.cas.authentication.AuthenticationHandler x509CredentialsAuthenticationHandler​(org.apereo.cas.configuration.CasConfigurationProperties casProperties, org.apereo.cas.adaptors.x509.authentication.revocation.checker.RevocationChecker resourceCrlRevocationChecker, org.apereo.cas.authentication.principal.PrincipalFactory x509PrincipalFactory, org.apereo.cas.adaptors.x509.authentication.revocation.checker.RevocationChecker crlDistributionPointRevocationChecker, org.apereo.cas.adaptors.x509.authentication.revocation.checker.RevocationChecker noOpRevocationChecker, org.apereo.cas.services.ServicesManager servicesManager)  
      org.apereo.cas.authentication.principal.PrincipalFactory x509PrincipalFactory()  
      org.apereo.cas.authentication.principal.PrincipalResolver x509SerialNumberAndIssuerDNPrincipalResolver​(org.apereo.cas.configuration.CasConfigurationProperties casProperties, org.apereo.cas.authentication.principal.PrincipalFactory x509PrincipalFactory, org.apereo.cas.adaptors.x509.authentication.principal.X509AttributeExtractor x509AttributeExtractor, org.apereo.services.persondir.IPersonAttributeDao attributeRepository)  
      org.apereo.cas.authentication.principal.PrincipalResolver x509SerialNumberPrincipalResolver​(org.apereo.cas.configuration.CasConfigurationProperties casProperties, org.apereo.cas.authentication.principal.PrincipalFactory x509PrincipalFactory, org.apereo.cas.adaptors.x509.authentication.principal.X509AttributeExtractor x509AttributeExtractor, org.apereo.services.persondir.IPersonAttributeDao attributeRepository)  
      org.apereo.cas.authentication.principal.PrincipalResolver x509SubjectAlternativeNameRFC822EmailPrincipalResolver​(org.apereo.cas.configuration.CasConfigurationProperties casProperties, org.apereo.cas.authentication.principal.PrincipalFactory x509PrincipalFactory, org.apereo.cas.adaptors.x509.authentication.principal.X509AttributeExtractor x509AttributeExtractor, org.apereo.services.persondir.IPersonAttributeDao attributeRepository)  
      org.apereo.cas.authentication.principal.PrincipalResolver x509SubjectAlternativeNameUPNPrincipalResolver​(org.apereo.cas.configuration.CasConfigurationProperties casProperties, org.apereo.cas.authentication.principal.PrincipalFactory x509PrincipalFactory, org.apereo.cas.adaptors.x509.authentication.principal.X509AttributeExtractor x509AttributeExtractor, org.apereo.services.persondir.IPersonAttributeDao attributeRepository)  
      org.apereo.cas.authentication.principal.PrincipalResolver x509SubjectDNPrincipalResolver​(org.apereo.cas.configuration.CasConfigurationProperties casProperties, org.apereo.cas.authentication.principal.PrincipalFactory x509PrincipalFactory, org.apereo.cas.adaptors.x509.authentication.principal.X509AttributeExtractor x509AttributeExtractor, org.apereo.services.persondir.IPersonAttributeDao attributeRepository)  
      org.apereo.cas.authentication.principal.PrincipalResolver x509SubjectPrincipalResolver​(org.apereo.cas.configuration.CasConfigurationProperties casProperties, org.apereo.cas.authentication.principal.PrincipalFactory x509PrincipalFactory, org.apereo.cas.adaptors.x509.authentication.principal.X509AttributeExtractor x509AttributeExtractor, org.apereo.services.persondir.IPersonAttributeDao attributeRepository)  
      • Methods inherited from class java.lang.Object

        clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
    • Constructor Detail

      • X509AuthenticationConfiguration

        public X509AuthenticationConfiguration()
    • Method Detail

      • allowRevocationPolicy

        @Bean
        @RefreshScope(proxyMode=DEFAULT)
        @ConditionalOnMissingBean(name="allowRevocationPolicy")
        public org.apereo.cas.adaptors.x509.authentication.revocation.policy.RevocationPolicy allowRevocationPolicy()
      • thresholdExpiredCRLRevocationPolicy

        @Bean
        @RefreshScope(proxyMode=DEFAULT)
        @ConditionalOnMissingBean(name="thresholdExpiredCRLRevocationPolicy")
        public org.apereo.cas.adaptors.x509.authentication.revocation.policy.RevocationPolicy thresholdExpiredCRLRevocationPolicy​(org.apereo.cas.configuration.CasConfigurationProperties casProperties)
      • denyRevocationPolicy

        @Bean
        @RefreshScope(proxyMode=DEFAULT)
        @ConditionalOnMissingBean(name="denyRevocationPolicy")
        public org.apereo.cas.adaptors.x509.authentication.revocation.policy.RevocationPolicy denyRevocationPolicy()
      • crlDistributionPointRevocationChecker

        @Bean
        @RefreshScope(proxyMode=DEFAULT)
        @ConditionalOnMissingBean(name="crlDistributionPointRevocationChecker")
        public org.apereo.cas.adaptors.x509.authentication.revocation.checker.RevocationChecker crlDistributionPointRevocationChecker​(org.apereo.cas.configuration.CasConfigurationProperties casProperties,
                                                                                                                                      @Qualifier("crlFetcher")
                                                                                                                                      org.apereo.cas.adaptors.x509.authentication.CRLFetcher crlFetcher,
                                                                                                                                      @Qualifier("allowRevocationPolicy")
                                                                                                                                      org.apereo.cas.adaptors.x509.authentication.revocation.policy.RevocationPolicy allowRevocationPolicy,
                                                                                                                                      @Qualifier("thresholdExpiredCRLRevocationPolicy")
                                                                                                                                      org.apereo.cas.adaptors.x509.authentication.revocation.policy.RevocationPolicy thresholdExpiredCRLRevocationPolicy,
                                                                                                                                      @Qualifier("denyRevocationPolicy")
                                                                                                                                      org.apereo.cas.adaptors.x509.authentication.revocation.policy.RevocationPolicy denyRevocationPolicy)
      • noOpRevocationChecker

        @Bean
        @RefreshScope(proxyMode=DEFAULT)
        @ConditionalOnMissingBean(name="noOpRevocationChecker")
        public org.apereo.cas.adaptors.x509.authentication.revocation.checker.RevocationChecker noOpRevocationChecker()
      • resourceCrlRevocationChecker

        @Bean
        @RefreshScope(proxyMode=DEFAULT)
        @ConditionalOnMissingBean(name="resourceCrlRevocationChecker")
        public org.apereo.cas.adaptors.x509.authentication.revocation.checker.RevocationChecker resourceCrlRevocationChecker​(org.apereo.cas.configuration.CasConfigurationProperties casProperties,
                                                                                                                             org.springframework.context.ConfigurableApplicationContext applicationContext,
                                                                                                                             @Qualifier("allowRevocationPolicy")
                                                                                                                             org.apereo.cas.adaptors.x509.authentication.revocation.policy.RevocationPolicy allowRevocationPolicy,
                                                                                                                             @Qualifier("thresholdExpiredCRLRevocationPolicy")
                                                                                                                             org.apereo.cas.adaptors.x509.authentication.revocation.policy.RevocationPolicy thresholdExpiredCRLRevocationPolicy,
                                                                                                                             @Qualifier("denyRevocationPolicy")
                                                                                                                             org.apereo.cas.adaptors.x509.authentication.revocation.policy.RevocationPolicy denyRevocationPolicy,
                                                                                                                             @Qualifier("crlFetcher")
                                                                                                                             org.apereo.cas.adaptors.x509.authentication.CRLFetcher crlFetcher)
      • crlFetcher

        @Bean
        @RefreshScope(proxyMode=DEFAULT)
        @ConditionalOnMissingBean(name="crlFetcher")
        public org.apereo.cas.adaptors.x509.authentication.CRLFetcher crlFetcher​(org.apereo.cas.configuration.CasConfigurationProperties casProperties)
      • x509CredentialsAuthenticationHandler

        @Bean
        @RefreshScope(proxyMode=DEFAULT)
        @ConditionalOnMissingBean(name="x509CredentialsAuthenticationHandler")
        public org.apereo.cas.authentication.AuthenticationHandler x509CredentialsAuthenticationHandler​(org.apereo.cas.configuration.CasConfigurationProperties casProperties,
                                                                                                        @Qualifier("resourceCrlRevocationChecker")
                                                                                                        org.apereo.cas.adaptors.x509.authentication.revocation.checker.RevocationChecker resourceCrlRevocationChecker,
                                                                                                        @Qualifier("x509PrincipalFactory")
                                                                                                        org.apereo.cas.authentication.principal.PrincipalFactory x509PrincipalFactory,
                                                                                                        @Qualifier("crlDistributionPointRevocationChecker")
                                                                                                        org.apereo.cas.adaptors.x509.authentication.revocation.checker.RevocationChecker crlDistributionPointRevocationChecker,
                                                                                                        @Qualifier("noOpRevocationChecker")
                                                                                                        org.apereo.cas.adaptors.x509.authentication.revocation.checker.RevocationChecker noOpRevocationChecker,
                                                                                                        @Qualifier("servicesManager")
                                                                                                        org.apereo.cas.services.ServicesManager servicesManager)
      • x509SubjectPrincipalResolver

        @Bean
        @RefreshScope(proxyMode=DEFAULT)
        @ConditionalOnMissingBean(name="x509SubjectPrincipalResolver")
        public org.apereo.cas.authentication.principal.PrincipalResolver x509SubjectPrincipalResolver​(org.apereo.cas.configuration.CasConfigurationProperties casProperties,
                                                                                                      @Qualifier("x509PrincipalFactory")
                                                                                                      org.apereo.cas.authentication.principal.PrincipalFactory x509PrincipalFactory,
                                                                                                      @Qualifier("x509AttributeExtractor")
                                                                                                      org.apereo.cas.adaptors.x509.authentication.principal.X509AttributeExtractor x509AttributeExtractor,
                                                                                                      @Qualifier("attributeRepository")
                                                                                                      org.apereo.services.persondir.IPersonAttributeDao attributeRepository)
      • x509SubjectDNPrincipalResolver

        @Bean
        @RefreshScope(proxyMode=DEFAULT)
        @ConditionalOnMissingBean(name="x509SubjectDNPrincipalResolver")
        public org.apereo.cas.authentication.principal.PrincipalResolver x509SubjectDNPrincipalResolver​(org.apereo.cas.configuration.CasConfigurationProperties casProperties,
                                                                                                        @Qualifier("x509PrincipalFactory")
                                                                                                        org.apereo.cas.authentication.principal.PrincipalFactory x509PrincipalFactory,
                                                                                                        @Qualifier("x509AttributeExtractor")
                                                                                                        org.apereo.cas.adaptors.x509.authentication.principal.X509AttributeExtractor x509AttributeExtractor,
                                                                                                        @Qualifier("attributeRepository")
                                                                                                        org.apereo.services.persondir.IPersonAttributeDao attributeRepository)
      • x509SubjectAlternativeNameUPNPrincipalResolver

        @Bean
        @RefreshScope(proxyMode=DEFAULT)
        @ConditionalOnMissingBean(name="x509SubjectAlternativeNameUPNPrincipalResolver")
        public org.apereo.cas.authentication.principal.PrincipalResolver x509SubjectAlternativeNameUPNPrincipalResolver​(org.apereo.cas.configuration.CasConfigurationProperties casProperties,
                                                                                                                        @Qualifier("x509PrincipalFactory")
                                                                                                                        org.apereo.cas.authentication.principal.PrincipalFactory x509PrincipalFactory,
                                                                                                                        @Qualifier("x509AttributeExtractor")
                                                                                                                        org.apereo.cas.adaptors.x509.authentication.principal.X509AttributeExtractor x509AttributeExtractor,
                                                                                                                        @Qualifier("attributeRepository")
                                                                                                                        org.apereo.services.persondir.IPersonAttributeDao attributeRepository)
      • x509SubjectAlternativeNameRFC822EmailPrincipalResolver

        @Bean
        @RefreshScope(proxyMode=DEFAULT)
        @ConditionalOnMissingBean(name="x509SubjectAlternativeNameRFC822EmailPrincipalResolver")
        public org.apereo.cas.authentication.principal.PrincipalResolver x509SubjectAlternativeNameRFC822EmailPrincipalResolver​(org.apereo.cas.configuration.CasConfigurationProperties casProperties,
                                                                                                                                @Qualifier("x509PrincipalFactory")
                                                                                                                                org.apereo.cas.authentication.principal.PrincipalFactory x509PrincipalFactory,
                                                                                                                                @Qualifier("x509AttributeExtractor")
                                                                                                                                org.apereo.cas.adaptors.x509.authentication.principal.X509AttributeExtractor x509AttributeExtractor,
                                                                                                                                @Qualifier("attributeRepository")
                                                                                                                                org.apereo.services.persondir.IPersonAttributeDao attributeRepository)
      • x509SerialNumberPrincipalResolver

        @Bean
        @RefreshScope(proxyMode=DEFAULT)
        @ConditionalOnMissingBean(name="x509SerialNumberPrincipalResolver")
        public org.apereo.cas.authentication.principal.PrincipalResolver x509SerialNumberPrincipalResolver​(org.apereo.cas.configuration.CasConfigurationProperties casProperties,
                                                                                                           @Qualifier("x509PrincipalFactory")
                                                                                                           org.apereo.cas.authentication.principal.PrincipalFactory x509PrincipalFactory,
                                                                                                           @Qualifier("x509AttributeExtractor")
                                                                                                           org.apereo.cas.adaptors.x509.authentication.principal.X509AttributeExtractor x509AttributeExtractor,
                                                                                                           @Qualifier("attributeRepository")
                                                                                                           org.apereo.services.persondir.IPersonAttributeDao attributeRepository)
      • x509PrincipalFactory

        @ConditionalOnMissingBean(name="x509PrincipalFactory")
        @Bean
        @RefreshScope(proxyMode=DEFAULT)
        public org.apereo.cas.authentication.principal.PrincipalFactory x509PrincipalFactory()
      • x509SerialNumberAndIssuerDNPrincipalResolver

        @Bean
        @RefreshScope(proxyMode=DEFAULT)
        @ConditionalOnMissingBean(name="x509SerialNumberAndIssuerDNPrincipalResolver")
        public org.apereo.cas.authentication.principal.PrincipalResolver x509SerialNumberAndIssuerDNPrincipalResolver​(org.apereo.cas.configuration.CasConfigurationProperties casProperties,
                                                                                                                      @Qualifier("x509PrincipalFactory")
                                                                                                                      org.apereo.cas.authentication.principal.PrincipalFactory x509PrincipalFactory,
                                                                                                                      @Qualifier("x509AttributeExtractor")
                                                                                                                      org.apereo.cas.adaptors.x509.authentication.principal.X509AttributeExtractor x509AttributeExtractor,
                                                                                                                      @Qualifier("attributeRepository")
                                                                                                                      org.apereo.services.persondir.IPersonAttributeDao attributeRepository)
      • x509CommonNameEDIPIPrincipalResolver

        @Bean
        @RefreshScope(proxyMode=DEFAULT)
        @ConditionalOnMissingBean(name="x509CommonNameEDIPIPrincipalResolver")
        public org.apereo.cas.authentication.principal.PrincipalResolver x509CommonNameEDIPIPrincipalResolver​(org.apereo.cas.configuration.CasConfigurationProperties casProperties,
                                                                                                              @Qualifier("x509PrincipalFactory")
                                                                                                              org.apereo.cas.authentication.principal.PrincipalFactory x509PrincipalFactory,
                                                                                                              @Qualifier("x509AttributeExtractor")
                                                                                                              org.apereo.cas.adaptors.x509.authentication.principal.X509AttributeExtractor x509AttributeExtractor,
                                                                                                              @Qualifier("attributeRepository")
                                                                                                              org.apereo.services.persondir.IPersonAttributeDao attributeRepository)
      • x509AuthenticationEventExecutionPlanConfigurer

        @ConditionalOnMissingBean(name="x509AuthenticationEventExecutionPlanConfigurer")
        @Bean
        @RefreshScope(proxyMode=DEFAULT)
        public org.apereo.cas.authentication.AuthenticationEventExecutionPlanConfigurer x509AuthenticationEventExecutionPlanConfigurer​(@Qualifier("x509SerialNumberPrincipalResolver")
                                                                                                                                       org.apereo.cas.authentication.principal.PrincipalResolver x509SerialNumberPrincipalResolver,
                                                                                                                                       @Qualifier("x509SerialNumberAndIssuerDNPrincipalResolver")
                                                                                                                                       org.apereo.cas.authentication.principal.PrincipalResolver x509SerialNumberAndIssuerDNPrincipalResolver,
                                                                                                                                       @Qualifier("x509SubjectPrincipalResolver")
                                                                                                                                       org.apereo.cas.authentication.principal.PrincipalResolver x509SubjectPrincipalResolver,
                                                                                                                                       @Qualifier("x509SubjectAlternativeNameUPNPrincipalResolver")
                                                                                                                                       org.apereo.cas.authentication.principal.PrincipalResolver x509SubjectAlternativeNameUPNPrincipalResolver,
                                                                                                                                       @Qualifier("x509SubjectAlternativeNameRFC822EmailPrincipalResolver")
                                                                                                                                       org.apereo.cas.authentication.principal.PrincipalResolver x509SubjectAlternativeNameRFC822EmailPrincipalResolver,
                                                                                                                                       @Qualifier("x509SubjectDNPrincipalResolver")
                                                                                                                                       org.apereo.cas.authentication.principal.PrincipalResolver x509SubjectDNPrincipalResolver,
                                                                                                                                       @Qualifier("x509CommonNameEDIPIPrincipalResolver")
                                                                                                                                       org.apereo.cas.authentication.principal.PrincipalResolver x509CommonNameEDIPIPrincipalResolver,
                                                                                                                                       org.apereo.cas.configuration.CasConfigurationProperties casProperties,
                                                                                                                                       @Qualifier("x509CredentialsAuthenticationHandler")
                                                                                                                                       org.apereo.cas.authentication.AuthenticationHandler x509CredentialsAuthenticationHandler)
      • x509AttributeExtractor

        @ConditionalOnMissingBean(name="x509AttributeExtractor")
        @RefreshScope(proxyMode=DEFAULT)
        @Bean
        public org.apereo.cas.adaptors.x509.authentication.principal.X509AttributeExtractor x509AttributeExtractor​(org.apereo.cas.configuration.CasConfigurationProperties casProperties)