|
BEA Systems, Inc. | ||||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||||
SUMMARY: INNER | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
This interface is used to perform certificate-based user authentication. Certificate-based authentication can be performed when a remote client makes a two-way-authenticated secure T3 connection to the server, in which case the client's certificate chain can be used to authenticate the remote user. This removes the need for the client to explicitly provide a username and password.
You can use this interface to map from a certificate to a user name according to whatever scheme is appropriate for your needs.
To specify an instance of this interface to be used by the server, set the weblogic.security.realm.certAuthenticator property to the name of a class that implements this interface. The server will access this instance through static methods in the CertAuthentication class.
Classes implementing this interface must have a public no-arg constructor.
CertAuthentication.authenticate(java.lang.String, java.util.Vector, boolean)
Method Summary | |
User |
authenticate(java.lang.String userName,
Certificate[] certs,
boolean ssl)
Authenticate a user based on a certificate chain they have presented. |
Method Detail |
public User authenticate(java.lang.String userName, Certificate[] certs, boolean ssl)
userName
- name presented by the user, if any. May be null.
Can be used or ignored, depending on the needs of
the security implementor.certs
- certificate change presented by the user. An array
of length at least 1. The first certificate is the leaf
(i.e. end user's) certificate. If the length is greater
than 1, the array is a certificate chain, with the last element
being the root CA.ssl
- true if the certificates to check were presented by the
client during a successful two-way SSL handshake.
|
Documentation is available at http://download.oracle.com/docs/cd/E13222_01/wls/docs60 |
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: INNER | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |