Interface PkiServerAuthenticationResult

All Known Implementing Classes:

PkiServerAuthenticationResult.Authenticated, PkiServerAuthenticationResult.Rejected

public sealed interface PkiServerAuthenticationResult
permits PkiServerAuthenticationResult.Authenticated, PkiServerAuthenticationResult.Rejected

Safe closed mutual-TLS authentication result.

This sealed type has exactly two permitted subtypes: PkiServerAuthenticationResult.Authenticated when the peer principal was resolved, and PkiServerAuthenticationResult.Rejected when authentication failed. Callers use an exhaustive switch or instanceof pattern to distinguish the two outcomes.

Thread safety

All permitted subtypes are immutable records; safe for concurrent access without additional synchronization.

Since:

1.0

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static final record	PkiServerAuthenticationResult.Authenticated	Successfully resolved persisted principal identity.
static enum	PkiServerAuthenticationResult.Code	Safe non-disclosing rejection codes.
static final record	PkiServerAuthenticationResult.Rejected	Authentication rejection containing only a stable safe code.

Method Summary

Modifier and Type	Method	Description
default Optional<String>	resolvedPrincipalId()	Returns the resolved end-client principal when authentication succeeded.

Method Details

resolvedPrincipalId

default Optional<String> resolvedPrincipalId()

Returns the resolved end-client principal when authentication succeeded.

Returns:

principal identity when authenticated, otherwise empty