Commit f2f7722d authored by Dr. Tobias Nils Ackermann's avatar Dr. Tobias Nils Ackermann Committed by oroulet

Fix User Authentication with certificates from UAExpert. Relates to #430

UAExpert sends its application certificate as client certificate in the initial `CreateSessionRequest`.
The user certificate is sent as `ua.X509IdentityToken` in the request body and has to be looked up there.
parent 573a8a3f
...@@ -90,6 +90,9 @@ class InternalSession: ...@@ -90,6 +90,9 @@ class InternalSession:
if self.iserver.user_manager is not None: if self.iserver.user_manager is not None:
if isinstance(id_token, ua.UserNameIdentityToken): if isinstance(id_token, ua.UserNameIdentityToken):
username, password = self.iserver.check_user_token(self, id_token) username, password = self.iserver.check_user_token(self, id_token)
elif isinstance(id_token, ua.X509IdentityToken):
peer_certificate = id_token.CertificateData
username, password = None, None
else: else:
username, password = None, None username, password = None, None
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment