org.eclipse.milo.opcua.sdk.server.identity

Class X509IdentityValidator

java.lang.Object

org.eclipse.milo.opcua.sdk.server.identity.AbstractIdentityValidator

org.eclipse.milo.opcua.sdk.server.identity.X509IdentityValidator

All Implemented Interfaces:

IdentityValidator

public class X509IdentityValidator
extends AbstractIdentityValidator

Constructor Summary

Constructors

Constructor and Description
X509IdentityValidator(Predicate<X509Certificate> predicate)

Method Summary

Modifier and Type	Method and Description
Object	validateX509Token(ServerSecureChannel channel, Session session, X509IdentityToken token, UserTokenPolicy tokenPolicy, SignatureData tokenSignature) Validate an X509IdentityToken and return an identity Object that represents the user.

Methods inherited from class org.eclipse.milo.opcua.sdk.server.identity.AbstractIdentityValidator

decryptTokenData, validateAnonymousToken, validateIdentityToken, validateIssuedIdentityToken, validateUsernameToken

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

X509IdentityValidator

public X509IdentityValidator(Predicate<X509Certificate> predicate)

Method Detail

validateX509Token

public Object validateX509Token(ServerSecureChannel channel,
                                Session session,
                                X509IdentityToken token,
                                UserTokenPolicy tokenPolicy,
                                SignatureData tokenSignature)
                         throws UaException

Description copied from class: AbstractIdentityValidator

Validate an X509IdentityToken and return an identity Object that represents the user.

This Object should implement equality in such a way that a subsequent identity validation for the same user yields a comparable Object.

Overrides:

validateX509Token in class AbstractIdentityValidator

Parameters:

channel - the ServerSecureChannel the request is arriving on.

session - the Session the request is arriving on.

token - the X509IdentityToken.

tokenPolicy - the UserTokenPolicy specified by the policyId in token.

tokenSignature - the SignatureData sent in the ActivateSessionRequest.

Returns:

an identity Object that represents the user.

Throws:

UaException - if the token is invalid, rejected, or user access is denied.