public class SSLAuthenticator extends AuthenticatorBase
AuthenticatorBase.AllowCorsPreflightLifecycle.SingleUsealwaysUseSession, AUTH_HEADER_NAME, cache, changeSessionIdOnAuthentication, context, disableProxyCaching, jaspicCallbackHandlerClass, REALM_NAME, securePagesWithPragma, secureRandomAlgorithm, secureRandomClass, secureRandomProvider, sendAuthInfoResponseHeaders, sessionIdGenerator, sm, ssoasyncSupported, container, containerLog, nextmserverAFTER_DESTROY_EVENT, AFTER_INIT_EVENT, AFTER_START_EVENT, AFTER_STOP_EVENT, BEFORE_DESTROY_EVENT, BEFORE_INIT_EVENT, BEFORE_START_EVENT, BEFORE_STOP_EVENT, CONFIGURE_START_EVENT, CONFIGURE_STOP_EVENT, PERIODIC_EVENT, START_EVENT, STOP_EVENT| Constructor and Description |
|---|
SSLAuthenticator() |
| Modifier and Type | Method and Description |
|---|---|
protected boolean |
doAuthenticate(Request request,
HttpServletResponse response)
Authenticate the user by checking for the existence of a certificate chain, validating it against the trust
manager for the connector and then validating the user's identity against the configured Realm.
|
protected java.lang.String |
getAuthMethod()
Return the authentication method, which is vendor-specific and not defined by HttpServletRequest.
|
protected java.security.cert.X509Certificate[] |
getRequestCertificates(Request request)
Look for the X509 certificate chain in the Request under the key
jakarta.servlet.request.X509Certificate. |
protected boolean |
isPreemptiveAuthPossible(Request request)
Can the authenticator perform preemptive authentication for the given request?
|
protected void |
startInternal()
Start this component and implement the requirements of
LifecycleBase.startInternal(). |
allowCorsPreflightBypass, associate, authenticate, changeSessionID, checkForCachedAuthentication, doLogin, getAllowCorsPreflight, getAlwaysUseSession, getCache, getChangeSessionIdOnAuthentication, getContainer, getDisableProxyCaching, getJaspicCallbackHandlerClass, getRealmName, getSecurePagesWithPragma, getSecureRandomAlgorithm, getSecureRandomClass, getSecureRandomProvider, invoke, isContinuationRequired, isSendAuthInfoResponseHeaders, login, logout, notify, reauthenticateFromSSO, register, register, setAllowCorsPreflight, setAlwaysUseSession, setCache, setChangeSessionIdOnAuthentication, setContainer, setDisableProxyCaching, setJaspicCallbackHandlerClass, setSecurePagesWithPragma, setSecureRandomAlgorithm, setSecureRandomClass, setSecureRandomProvider, setSendAuthInfoResponseHeaders, stopInternalbackgroundProcess, getDomainInternal, getNext, getObjectNameKeyProperties, initInternal, isAsyncSupported, setAsyncSupported, setNext, toStringdestroyInternal, getDomain, getObjectName, postDeregister, postRegister, preDeregister, preRegister, register, setDomain, unregister, unregisteraddLifecycleListener, destroy, findLifecycleListeners, fireLifecycleEvent, getState, getStateName, getThrowOnFailure, init, removeLifecycleListener, setState, setState, setThrowOnFailure, start, stopprotected boolean doAuthenticate(Request request, HttpServletResponse response) throws java.io.IOException
doAuthenticate in class AuthenticatorBaserequest - Request we are processingresponse - Response we are creatingtrue if the the user was authenticated, otherwise false, in which case an authentication challenge will have been written to the responsejava.io.IOException - if an input/output error occursprotected java.lang.String getAuthMethod()
AuthenticatorBasegetAuthMethod in class AuthenticatorBaseprotected boolean isPreemptiveAuthPossible(Request request)
AuthenticatorBaseisPreemptiveAuthPossible in class AuthenticatorBaserequest - The request to check for credentialstrue if preemptive authentication is possible, otherwise falseprotected java.security.cert.X509Certificate[] getRequestCertificates(Request request) throws java.lang.IllegalStateException
jakarta.servlet.request.X509Certificate. If not found, trigger extracting the certificate chain from
the Coyote request.request - Request to be processednull otherwise.java.lang.IllegalStateExceptionprotected void startInternal()
throws LifecycleException
ValveBaseLifecycleBase.startInternal().startInternal in class AuthenticatorBaseLifecycleException - if this component detects a fatal error that prevents this component from being
usedCopyright © 2000-2024 Apache Software Foundation.
Apache Tomcat, Tomcat, Apache, the Apache Tomcat logo and the Apache logo are either registered trademarks or trademarks of the Apache Software Foundation.