users@glassfish.java.net

Accessing user certificate within an EJB

From: <glassfish_at_javadesktop.org>
Date: Mon, 21 Jun 2010 02:49:06 PDT

Hi all,

We have a HTTPS protected web app (with user certificate) that calls some EJB's. Those EJB's need to access the user certificate in order to proceed with the authorization. The user certificate cannot be passed to EJB via method parameter.

On the web part, we can access the user certificate on the httpRequest object by using the WebPrincipal, but unfortunately it's not available anymore on the EJB container when using the EJBContext (context.getCallerPrincipal ();).

Some ideas ?

Thanks in advance!
[Message sent by forum member 'patoulatchi_m']

http://forums.java.net/jive/thread.jspa?messageID=475103