What ideally should happen next is that another component will look at the identity in the certificate, and then use that identity to make an authorization decision.

• 接下来理想的情况应该是另一个组件查看证书中的身份,然后使用该身份做出授权决策。