client-certificate-auth API Reference

---

client-certificate-auth API Reference / parsers / parseUrlPemAws

Function: parseUrlPemAws()

parseUrlPemAws(headerValue): ChainedPeerCertificate | null

Defined in: parsers.js:228

Parse URL-encoded PEM certificate with AWS ALB safe character handling. AWS ALB uses +, =, / as safe characters (not encoded), but decodeURIComponent interprets + as space, so we must escape it first. AWS sends the full chain as concatenated PEM blocks, which we split and link via issuerCertificate. A value carrying a literal comma is rejected as a joined repeat.

Parameters

headerValue

string

AWS ALB URL-encoded PEM certificate

Returns

ChainedPeerCertificate | null

Parsed certificate or null on failure

See

https://docs.aws.amazon.com/elasticloadbalancing/latest/application/mutual-authentication.html