users@jersey.java.net

[Jersey] Grizzly SSL client certs to Jersey SecurityContext

From: Christopher Larrieu <larrieu_at_jlab.org>
Date: Fri, 11 May 2012 14:58:41 -0400

Hello,

How does one get SSL client certificates to bubble up from the Grizzly layer to Jersey's SecurityContext injectable?

I don't see anywhere that I can place an interceptor to call ContainerRequest.setSecurityContext().

The nexus between Grizzly and Jersey seems to be GrizzlyContainer, specifically the method _service(). This is the only bit of code that knows about both Grizzly and nexus, but it's a final class so I can't extend it to add this feature.

Has anybody successfully propagated client TLS certificate authentication from Grizzly up to Jersey? Am I missing something obvious?

I'm working with jersey-grizzly2, version 1.12.

Thanks much!

Chris