Optionally disable client authentication

[aai/data-router.git] / src / main / java / org / onap / aai / datarouter / Application.java

diff --git a/src/main/java/org/onap/aai/datarouter/Application.java b/src/main/java/org/onap/aai/datarouter/Application.java
index 1a2a5e7..d217a2f 100644 (file)
--- a/src/main/java/org/onap/aai/datarouter/Application.java
+++ b/src/main/java/org/onap/aai/datarouter/Application.java
@@ -67,8 +67,11 @@ public class Application extends SpringBootServletInitializer{
           trustStorePassword = trustStorePassword.startsWith(JETTY_OBFUSCATION_PATTERN)?Password.deobfuscate(trustStorePassword):trustStorePassword;
           props.put("server.ssl.trust-store", trustStoreLocation);
           props.put("server.ssl.trust-store-password", trustStorePassword);
-      } 
-      
+      }
+
+      String requireClientAuth = System.getenv("REQUIRE_CLIENT_AUTH");
+      props.put("server.ssl.client-auth",
+          Boolean.FALSE.toString().equalsIgnoreCase(requireClientAuth) ? "want" : "need");
 
       new Application().configure(new SpringApplicationBuilder(Application.class).properties(props)).run(args);
     }