9.7. 使用客户端证书配置授权

流程

1. 在安全授权配置中启用 common-name-role-mapper。

2. 从客户端证书中为通用名称(CN)分配具有适当权限的角色。

   <cache-container name="certificate-authentication" statistics="true">
      <security>
        <authorization>
          <!-- Declare a role mapper that associates the common name (CN) field
               in client certificate trust stores with authorization roles. -->
          <common-name-role-mapper/>
          <!-- In this example, if a client certificate contains `CN=Client1` then
               clients with matching certificates get ALL permissions. -->
          <role name="Client1" permissions="ALL"/>
        </authorization>
      </security>
   </cache-container>