Struct ClientCertAuthMethod 

pub struct ClientCertAuthMethod { /* private fields */ }

Application-layer client certificate authenticator.

Validates an X.509 client certificate presented after an mTLS handshake and extracts a CertIdentity that higher-level code can use to create a session.

Minimal usage

use auth_framework::methods::client_cert::{ClientCertAuthMethod, ClientCertConfig};
use auth_framework::authentication::credentials::Credential;

let method = ClientCertAuthMethod::new(ClientCertConfig::new());

// `cert_der` comes from your HTTP framework's peer certificate extraction.
let identity = method.authenticate(&Credential::client_cert_from_tls(cert_der))?;

Implementations

impl ClientCertAuthMethod

pub fn new(config: ClientCertConfig) -> Self

Create a new authenticator with the given configuration.

pub fn authenticate(&self, credential: &Credential) -> Result<CertIdentity>

Validate credential and return the caller’s certificate identity.

Accepts Credential::Certificate { certificate, .. }. The private_key field is ignored — key possession was already proved by the TLS handshake. Use Credential::client_cert_from_tls to construct the credential without supplying a private key.