While mTLS is typically used for unattended processes connecting to each other, it can be used in browsers to authenticate users automatically.

See https://github.com/deephaven/deephaven-core/tree/main/server/dev-certs#Client for example instructions on setting up a client certificate and getting it signed by a CA.

See https://github.com/deephaven/deephaven-core/tree/main/server/jetty-app#configuration--ssl for instructions on passing a CA or trust store to a Deephaven server so it can validate users to be trusted. Note that the server must be configured to be accessed with SSL to work at all, otherwise the client's certificate will not be presented. If you are building the project from source, you can run ./gradlew :jetty-server-app:run -PdevMTLS (likely with -Pgroovy unless you have a local venv with deephaven wheels installed as well).

The client code on this page will attempt to authenticate to the server with the client's certificate, logging messages below regarding progress. Click "Go" below to get started.