i am trying to achieve this:
i have a bunch of users who log in to my website. some of the user can opt to be allowed to log in using their selected devices.
for this i am planning to use
ssl based client certificates which users can install in their browser.
How do i then check for the presence of the valid certificate?
i cannot just use it at the web server(
nginx) level as only few users are to be bound to devices.
How does this flow works at implementation level? i have a reference point here
for testing purpose i have a
PKI setup up with a
root CA and an
intermediate CA that is used to create sign the device certs.