Optionally disable client authentication

based on an env. variable, client authentication can be disabled

Change-Id: Ib1a45adee8bf889705a3f8a5db45945caeb6ea94
Issue-ID: AAI-2132
Signed-off-by: Serban Popescu <serban.popescu@amdocs.com>

1 files changed, 5 insertions, 2 deletions

diff --git a/src/main/java/org/onap/aai/datarouter/Application.java b/src/main/java/org/onap/aai/datarouter/Application.java
index 1a2a5e7..d217a2f 100644
--- a/src/main/java/org/onap/aai/datarouter/Application.java
+++ b/src/main/java/org/onap/aai/datarouter/Application.java
@@ -67,8 +67,11 @@ public class Application extends SpringBootServletInitializer{
           trustStorePassword = trustStorePassword.startsWith(JETTY_OBFUSCATION_PATTERN)?Password.deobfuscate(trustStorePassword):trustStorePassword;
           props.put("server.ssl.trust-store", trustStoreLocation);
           props.put("server.ssl.trust-store-password", trustStorePassword);
-      } 
-      
+      }
+
+      String requireClientAuth = System.getenv("REQUIRE_CLIENT_AUTH");
+      props.put("server.ssl.client-auth",
+          Boolean.FALSE.toString().equalsIgnoreCase(requireClientAuth) ? "want" : "need");
 
       new Application().configure(new SpringApplicationBuilder(Application.class).properties(props)).run(args);
     }