org.keycloak.services.x509.AbstractClientCertificateFromHttpHeadersLookup クラス

org.keycloak.services.x509.AbstractClientCertificateFromHttpHeadersLookup の継承関係図

org.keycloak.services.x509.AbstractClientCertificateFromHttpHeadersLookup 連携図

公開メンバ関数
	AbstractClientCertificateFromHttpHeadersLookup (String sslCientCertHttpHeader, String sslCertChainHttpHeaderPrefix, int certificateChainLength)
void	close ()
X509Certificate []	getCertificateChain (HttpRequest httpRequest) throws GeneralSecurityException

限定公開メンバ関数
abstract X509Certificate	decodeCertificateFromPem (String pem) throws PemException
X509Certificate	getCertificateFromHttpHeader (HttpRequest request, String httpHeader) throws GeneralSecurityException

限定公開変数類
final String	sslClientCertHttpHeader
final String	sslCertChainHttpHeaderPrefix

静的限定公開変数類
static final Logger	logger = Logger.getLogger(AbstractClientCertificateFromHttpHeadersLookup.class)

静的関数
static String	getHeaderValue (HttpRequest httpRequest, String headerName)

静的非公開メンバ関数
static String	trimDoubleQuotes (String quotedString)

非公開変数類
final int	certificateChainLength

詳解

著者

Peter Nalyvayko

バージョン

Revision

1

から

3/29/2017

構築子と解体子

AbstractClientCertificateFromHttpHeadersLookup()

org.keycloak.services.x509.AbstractClientCertificateFromHttpHeadersLookup.AbstractClientCertificateFromHttpHeadersLookup ( String  sslCientCertHttpHeader, String  sslCertChainHttpHeaderPrefix, int  certificateChainLength  )

inline

                                                                                      {
        if (sslCientCertHttpHeader == null) {
            throw new IllegalArgumentException("sslClientCertHttpHeader");
        }

        if (certificateChainLength < 0) {
            throw new IllegalArgumentException("certificateChainLength must be greater or equal to zero");
        }

        this.sslClientCertHttpHeader = sslCientCertHttpHeader;
        this.sslCertChainHttpHeaderPrefix = sslCertChainHttpHeaderPrefix;
        this.certificateChainLength = certificateChainLength;
    }

関数詳解

close()

void org.keycloak.services.x509.AbstractClientCertificateFromHttpHeadersLookup.close ( )

inline

org.keycloak.provider.Providerを実装しています。

                        {

    }

decodeCertificateFromPem()

abstract X509Certificate org.keycloak.services.x509.AbstractClientCertificateFromHttpHeadersLookup.decodeCertificateFromPem ( String  pem ) throws PemException

abstractprotected

getCertificateChain()

X509Certificate [] org.keycloak.services.x509.AbstractClientCertificateFromHttpHeadersLookup.getCertificateChain ( HttpRequest  httpRequest ) throws GeneralSecurityException

inline

org.keycloak.services.x509.X509ClientCertificateLookupを実装しています。

                                                                                                          {
        List<X509Certificate> chain = new ArrayList<>();

        // Get the client certificate
        X509Certificate cert = getCertificateFromHttpHeader(httpRequest, sslClientCertHttpHeader);
        if (cert != null) {
            chain.add(cert);
            // Get the certificate of the client certificate chain
            for (int i = 0; i < certificateChainLength; i++) {
                try {
                    String s = String.format("%s_%s", sslCertChainHttpHeaderPrefix, i);
                    cert = getCertificateFromHttpHeader(httpRequest, s);
                    if (cert != null) {
                        chain.add(cert);
                    }
                }
                catch(GeneralSecurityException e) {
                    logger.warn(e.getMessage(), e);
                }
            }
        }
        return chain.toArray(new X509Certificate[0]);
    }

getCertificateFromHttpHeader()

X509Certificate org.keycloak.services.x509.AbstractClientCertificateFromHttpHeadersLookup.getCertificateFromHttpHeader ( HttpRequest  request, String  httpHeader  ) throws GeneralSecurityException

inlineprotected

                                                                                                                                   {

        String encodedCertificate = getHeaderValue(request, httpHeader);

        // Remove double quotes
        encodedCertificate = trimDoubleQuotes(encodedCertificate);

        if (encodedCertificate == null ||
                encodedCertificate.trim().length() == 0) {
            logger.warnf("HTTP header \"%s\" is empty", httpHeader);
            return null;
        }

        try {
            X509Certificate cert = decodeCertificateFromPem(encodedCertificate);
            if (cert == null) {
                logger.warnf("HTTP header \"%s\" does not contain a valid x.509 certificate\n%s",
                        httpHeader, encodedCertificate);
            } else {
                logger.debugf("Found a valid x.509 certificate in \"%s\" HTTP header",
                        httpHeader);
            }
            return cert;
        }
        catch(PemException e) {
            logger.error(e.getMessage(), e);
            throw new GeneralSecurityException(e);
        }
    }

getHeaderValue()

static String org.keycloak.services.x509.AbstractClientCertificateFromHttpHeadersLookup.getHeaderValue ( HttpRequest  httpRequest, String  headerName  )

inlinestaticpackage

                                                                             {
        return httpRequest.getHttpHeaders().getRequestHeaders().getFirst(headerName);
    }

trimDoubleQuotes()

static String org.keycloak.services.x509.AbstractClientCertificateFromHttpHeadersLookup.trimDoubleQuotes ( String  quotedString )

inlinestaticprivate

                                                                {

        if (quotedString == null) return null;

        int len = quotedString.length();
        if (len > 1 && quotedString.charAt(0) == '"' &&
                quotedString.charAt(len - 1) == '"') {
            logger.trace("Detected a certificate enclosed in double quotes");
            return quotedString.substring(1, len - 1);
        }
        return quotedString;
    }

メンバ詳解

certificateChainLength

final int org.keycloak.services.x509.AbstractClientCertificateFromHttpHeadersLookup.certificateChainLength

private

logger

final Logger org.keycloak.services.x509.AbstractClientCertificateFromHttpHeadersLookup.logger = Logger.getLogger(AbstractClientCertificateFromHttpHeadersLookup.class)

staticprotected

sslCertChainHttpHeaderPrefix

final String org.keycloak.services.x509.AbstractClientCertificateFromHttpHeadersLookup.sslCertChainHttpHeaderPrefix

protected

sslClientCertHttpHeader

final String org.keycloak.services.x509.AbstractClientCertificateFromHttpHeadersLookup.sslClientCertHttpHeader

protected

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/doxygen/keycloak/oidc-service/src/main/java/org/keycloak/services/x509/AbstractClientCertificateFromHttpHeadersLookup.java