Optionally disable client authentication

[aai/search-data-service.git] / src / main / java / org / onap / aai / sa / Application.java

diff --git a/src/main/java/org/onap/aai/sa/Application.java b/src/main/java/org/onap/aai/sa/Application.java
index f2b8db1..059ca22 100644 (file)
--- a/src/main/java/org/onap/aai/sa/Application.java
+++ b/src/main/java/org/onap/aai/sa/Application.java
@@ -46,6 +46,13 @@ public class Application extends SpringBootServletInitializer {
             props.put("server.ssl.trust-store-password", trustStorePassword);\r
         }\r
 \r
+        String requireClientAuth = System.getenv("REQUIRE_CLIENT_AUTH");\r
+        if (requireClientAuth == null || requireClientAuth.isEmpty()) {\r
+            props.put("server.ssl.client-auth", "need");\r
+        }else {\r
+            props.put("server.ssl.client-auth", Boolean.valueOf(requireClientAuth)? "need" : "want");\r
+        }\r
+               \r
         new Application().configure(new SpringApplicationBuilder(Application.class).properties(props)).run(args);\r
     }\r
 }\r