org.qi4j.library.shiro.authc
Class X509CredentialsPKIXPathMatcher

java.lang.Object
  org.qi4j.library.shiro.authc.X509CredentialsPKIXPathMatcher

All Implemented Interfaces:

org.apache.shiro.authc.credential.CredentialsMatcher

public class X509CredentialsPKIXPathMatcher
extends Object
implements org.apache.shiro.authc.credential.CredentialsMatcher

See http://java.sun.com/javase/6/docs/technotes/guides/security/certpath/CertPathProgGuide.html for reference and http://stackoverflow.com/questions/2457795/x-509-certificate-validation-with-java-and-bouncycastle/2458343 for a quick example using Sun API. This implementation use the BouncyCastle PKIX API as it behave much better and will make CRLs support easily implemented when needed.

Constructor Summary

X509CredentialsPKIXPathMatcher()

Method Summary

boolean

doCredentialsMatch(org.apache.shiro.authc.AuthenticationToken token, org.apache.shiro.authc.AuthenticationInfo info)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

X509CredentialsPKIXPathMatcher

public X509CredentialsPKIXPathMatcher()

Method Detail

doCredentialsMatch

public boolean doCredentialsMatch(org.apache.shiro.authc.AuthenticationToken token,
                                  org.apache.shiro.authc.AuthenticationInfo info)

Specified by:

doCredentialsMatch in interface org.apache.shiro.authc.credential.CredentialsMatcher