de.innovationgate.webgate.api.auth

Interface CertAuthCapableAuthModule

public interface CertAuthCapableAuthModule

Mixin Interface for AuthenticationModule implementations that are able to be used with certificate authentication

Method Summary

Methods

Modifier and Type	Method and Description
java.security.cert.X509Certificate	getCA() Returns the certificate authority to use for certificate authentication Only certificates will be allowed to login that are signed against this CA
java.security.cert.X509CRL	getCRL() Returns the certificate revoke list to use for certificate authentication certificates listed here will not be allowed to login, even when they are signed against the correct CA
boolean	isCertAuthEnabled() Returns if certificate authentication is enabled and should be used by the database, if not otherwise configured there
AuthenticationSession	login(java.security.cert.X509Certificate cert) Called to verify a login that uses a certificate as credential.

Method Detail

isCertAuthEnabled

boolean isCertAuthEnabled()

Returns if certificate authentication is enabled and should be used by the database, if not otherwise configured there

login

AuthenticationSession login(java.security.cert.X509Certificate cert)
                            throws AuthenticationException

Called to verify a login that uses a certificate as credential. Returns a session object if it succeeds.

Parameters:

cert - The certificate

Returns:

An authentication session object if the login succeeds. null otherwise.

Throws:

AuthenticationException - If the login cannot be verified

getCRL

java.security.cert.X509CRL getCRL()
                                  throws AuthenticationException

Returns the certificate revoke list to use for certificate authentication certificates listed here will not be allowed to login, even when they are signed against the correct CA

Throws:

AuthenticationException

getCA

java.security.cert.X509Certificate getCA()
                                         throws AuthenticationException

Returns the certificate authority to use for certificate authentication Only certificates will be allowed to login that are signed against this CA

Throws:

AuthenticationException