Paramètre x509 serverendpoint

En faite la solution est d'utiliser un filtre sur les requêtes entrantes :

Code:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
public class commandFilter implements Filter
 
...
 
    private void doBeforeProcessing(ServletRequest request, ServletResponse response)
            throws IOException, ServletException {
        if (debug) {
            log("commandFilter:DoBeforeProcessing");
        }
 
        System.out.println("[+] In filter command before processing");
 
        HttpServletRequest req = (HttpServletRequest) request;
        HttpSession session = req.getSession();
 
        X509Certificate[] cert = (X509Certificate[]) req.getAttribute("javax.servlet.request.X509Certificate");        
        session.setAttribute("javax.servlet.request.X509Certificate", cert);
 
 {

Ensuite on récupère la session dans un ServerEndpointConfig.Configurator :

Code:

1
2
3
4
5
6
7
8
9
10
11
12
public class GetHttpSessionConfigurator extends ServerEndpointConfig.Configurator
{
    @Override
    public void modifyHandshake(ServerEndpointConfig config, 
                                HandshakeRequest request, 
                                HandshakeResponse response)
    {        
        super.modifyHandshake(config, request, response);
        HttpSession httpSession = (HttpSession)request.getHttpSession();
        config.getUserProperties().put(HttpSession.class.getName(),httpSession);
    }
}

Et voila ;)