From 2cc0137be30f9b13363cc1f7f10115c78ad57b7e Mon Sep 17 00:00:00 2001
From: Manish Kumar <110275771+code4uuuu@users.noreply.github.com>
Date: Fri, 13 Oct 2023 14:25:49 +0530
Subject: [PATCH] [MNT-23896] run handleClientAuth only when this.enforce
 variable is true (#2248)

---
 .../alfresco/web/scripts/servlet/X509ServletFilterBase.java   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/core/src/main/java/org/alfresco/web/scripts/servlet/X509ServletFilterBase.java b/core/src/main/java/org/alfresco/web/scripts/servlet/X509ServletFilterBase.java
index 9998072a06..08fdd508d3 100644
--- a/core/src/main/java/org/alfresco/web/scripts/servlet/X509ServletFilterBase.java
+++ b/core/src/main/java/org/alfresco/web/scripts/servlet/X509ServletFilterBase.java
@@ -74,8 +74,6 @@ public abstract class X509ServletFilterBase implements Filter
                 logger.debug("Initializing X509ServletFilter");
             }
 
-            this.handleClientAuth();
-
             this.enforce = checkEnforce(config.getServletContext());
 
             if(logger.isDebugEnabled())
@@ -85,6 +83,8 @@ public abstract class X509ServletFilterBase implements Filter
 
             if (this.enforce)
             {
+                this.handleClientAuth();
+
                 /*
                 * We are enforcing so get the cert-contains string.
                 */