public abstract class AbstractX509ClientCertificateAuthenticator extends Object implements Authenticator
| Modifier and Type | Class and Description |
|---|---|
protected static class |
AbstractX509ClientCertificateAuthenticator.CertificateValidatorConfigBuilder |
protected static class |
AbstractX509ClientCertificateAuthenticator.UserIdentityExtractorBuilder |
protected static class |
AbstractX509ClientCertificateAuthenticator.UserIdentityToModelMapperBuilder |
| Modifier and Type | Field and Description |
|---|---|
static String |
CERTIFICATE_EXTENDED_KEY_USAGE |
static String |
CERTIFICATE_KEY_USAGE |
static String |
CONFIRMATION_PAGE_DISALLOWED |
static String |
CRL_RELATIVE_PATH |
static String |
CUSTOM_ATTRIBUTE_NAME |
static String |
DEFAULT_ATTRIBUTE_NAME |
static String |
ENABLE_CRL |
static String |
ENABLE_CRLDP |
static String |
ENABLE_OCSP |
protected static ServicesLogger |
logger |
static String |
MAPPING_SOURCE_CERT_ISSUERDN |
static String |
MAPPING_SOURCE_CERT_ISSUERDN_CN |
static String |
MAPPING_SOURCE_CERT_ISSUERDN_EMAIL |
static String |
MAPPING_SOURCE_CERT_SERIALNUMBER |
static String |
MAPPING_SOURCE_CERT_SUBJECTALTNAME_EMAIL |
static String |
MAPPING_SOURCE_CERT_SUBJECTDN |
static String |
MAPPING_SOURCE_CERT_SUBJECTDN_CN |
static String |
MAPPING_SOURCE_CERT_SUBJECTDN_EMAIL |
static String |
MAPPING_SOURCE_SELECTION |
static String |
OCSPRESPONDER_URI |
static String |
REGULAR_EXPRESSION |
static String |
USER_ATTRIBUTE_MAPPER |
static String |
USER_MAPPER_SELECTION |
static String |
USERNAME_EMAIL_MAPPER |
| Constructor and Description |
|---|
AbstractX509ClientCertificateAuthenticator() |
| Modifier and Type | Method and Description |
|---|---|
CertificateValidator.CertificateValidatorBuilder |
certificateValidationParameters(X509AuthenticatorConfigModel config) |
void |
close() |
boolean |
configuredFor(KeycloakSession session,
RealmModel realm,
UserModel user) |
protected javax.ws.rs.core.Response |
createInfoResponse(AuthenticationFlowContext context,
String infoMessage,
Object... parameters) |
protected X509Certificate[] |
getCertificateChain(AuthenticationFlowContext context) |
UserIdentityExtractor |
getUserIdentityExtractor(X509AuthenticatorConfigModel config) |
UserIdentityToModelMapper |
getUserIdentityToModelMapper(X509AuthenticatorConfigModel config) |
boolean |
requiresUser() |
void |
setRequiredActions(KeycloakSession session,
RealmModel realm,
UserModel user) |
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, waitaction, authenticatepublic static final String DEFAULT_ATTRIBUTE_NAME
protected static ServicesLogger logger
public static final String REGULAR_EXPRESSION
public static final String ENABLE_CRL
public static final String ENABLE_OCSP
public static final String ENABLE_CRLDP
public static final String CRL_RELATIVE_PATH
public static final String OCSPRESPONDER_URI
public static final String MAPPING_SOURCE_SELECTION
public static final String MAPPING_SOURCE_CERT_SUBJECTDN
public static final String MAPPING_SOURCE_CERT_SUBJECTDN_EMAIL
public static final String MAPPING_SOURCE_CERT_SUBJECTALTNAME_EMAIL
public static final String MAPPING_SOURCE_CERT_SUBJECTDN_CN
public static final String MAPPING_SOURCE_CERT_ISSUERDN
public static final String MAPPING_SOURCE_CERT_ISSUERDN_EMAIL
public static final String MAPPING_SOURCE_CERT_ISSUERDN_CN
public static final String MAPPING_SOURCE_CERT_SERIALNUMBER
public static final String USER_MAPPER_SELECTION
public static final String USER_ATTRIBUTE_MAPPER
public static final String USERNAME_EMAIL_MAPPER
public static final String CUSTOM_ATTRIBUTE_NAME
public static final String CERTIFICATE_KEY_USAGE
public static final String CERTIFICATE_EXTENDED_KEY_USAGE
public static final String CONFIRMATION_PAGE_DISALLOWED
public AbstractX509ClientCertificateAuthenticator()
protected javax.ws.rs.core.Response createInfoResponse(AuthenticationFlowContext context, String infoMessage, Object... parameters)
public CertificateValidator.CertificateValidatorBuilder certificateValidationParameters(X509AuthenticatorConfigModel config) throws Exception
Exceptionprotected X509Certificate[] getCertificateChain(AuthenticationFlowContext context)
public UserIdentityExtractor getUserIdentityExtractor(X509AuthenticatorConfigModel config)
public UserIdentityToModelMapper getUserIdentityToModelMapper(X509AuthenticatorConfigModel config)
public boolean requiresUser()
requiresUser in interface Authenticatorpublic boolean configuredFor(KeycloakSession session, RealmModel realm, UserModel user)
configuredFor in interface Authenticatorpublic void setRequiredActions(KeycloakSession session, RealmModel realm, UserModel user)
setRequiredActions in interface AuthenticatorCopyright © 2018 JBoss by Red Hat. All rights reserved.