Optionally disable client authentication

[aai/spike.git] / src / main / java / org / onap / aai / spike / SpikeApplication.java

diff --git a/src/main/java/org/onap/aai/spike/SpikeApplication.java b/src/main/java/org/onap/aai/spike/SpikeApplication.java
index fed74af..bbc29fe 100644 (file)
--- a/src/main/java/org/onap/aai/spike/SpikeApplication.java
+++ b/src/main/java/org/onap/aai/spike/SpikeApplication.java
@@ -61,6 +61,10 @@ public class SpikeApplication extends SpringBootServletInitializer {
         props.put("schema.service.ssl.key-store-password", Password.deobfuscate(keyStorePassword));
         props.put("schema.service.ssl.trust-store-password", Password.deobfuscate(keyStorePassword));
 
+        String requireClientAuth = System.getenv("REQUIRE_CLIENT_AUTH");
+        props.put("server.ssl.client-auth",
+                Boolean.FALSE.toString().equalsIgnoreCase(requireClientAuth) ? "want" : "need");
+
         new SpikeApplication().configure(new SpringApplicationBuilder(SpikeApplication.class).properties(props))
                 .run(args);
     }