Skip to main content
Version: v0.0.3

Type Alias: ClientAuth

ClientAuth = "NONE" | "WANT" | "MUST"

ATNA ITI-19 mutual-authentication modes for ServerTlsOptions.clientAuth.

Mirrors the IHE ATNA "Authenticate Node" mutual-auth requirement (https://profiles.ihe.net/ITI/TF/Volume2/ITI-19.html):

  • 'NONE', no client certificate requested (default).
  • 'WANT', client certificate requested but NOT required; an untrusted or absent client certificate does not reject the connection. The peer certificate (if any) is surfaced on the 'connection' event.
  • 'MUST', client certificate required AND verified against ServerTlsOptions.ca; the ATNA mutual-authentication mode. A missing or untrusted client certificate rejects the handshake.

Example​

import type { ClientAuth } from '@cosyte/mllp';
const mode: ClientAuth = 'MUST'; // ATNA ITI-19 mutual node authentication