Skip to content

mtlsAuthenticate

function mtlsAuthenticate(options): AuthenticateFn;

Defined in: src/http/mtls.ts:224

Create an mTLS authenticate callback with custom certificate validation.

Generic factory that parses the client certificate from a proxy header and delegates identity extraction to a user-supplied validate callback.

Warning: The reverse proxy MUST strip client-supplied certificate headers before forwarding.

Parameter Type
options { checkExpiry?: boolean; header?: string; validate: CertValidateFn; }
options.checkExpiry? boolean
options.header? string
options.validate CertValidateFn

AuthenticateFn