authenticating clients with certificates

Pragya Keshap answered on February 7, 2023 Popularity 1/10 Helpfulness 1/10

answer authenticating clients with certificates

authenticating clients with certificates

Comment

A client authentication certificate is a certificate used to authenticate clients during an SSL handshake.

It authenticates users who access a server by exchanging the client authentication certificate.

@SpringBootApplication
@EnableWebSecurity
@EnableGlobalMethodSecurity(prePostEnabled = true)
public class X509AuthenticationServer {
    ...

    @Bean
    public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
        http.authorizeRequests()
            .anyRequest()
            .authenticated()
            .and()
            .x509()
            .subjectPrincipalRegex("CN=(.*?)(?:,|$)")
            .userDetailsService(userDetailsService());
        return http.build();
    }

    @Bean
    public UserDetailsService userDetailsService() {
        return new UserDetailsService() {
            @Override
            public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
                if (username.equals("Bob")) {
                    return new User(username, "", 
                     AuthorityUtils.commaSeparatedStringToAuthorityList("ROLE_USER"));
                }
                throw new UsernameNotFoundException("User not found!");
            }
        };
    }
}

https://www.techopedia.com/definition/29760/client-authentication-certificate#:~:text=A%20client%20authentication%20certificate%20is,exchanging%20the%20client%20authentication%20certificate.

Popularity 1/10 Helpfulness 1/10 Language java

Source: Grepper

Tags: clients java

Link to this answer
Share Copy Link

Contributed on Feb 07 2023

Pragya Keshap

0 Answers Avg Quality 2/10

authenticating clients with certificates

Contents

More Related Answers

authenticating clients with certificates

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.