nginx can do the client cert verification for you and pass the results as http headers to the application. so all you have to do in the application is to add so

nginx can do the client cert verification for you and pass the results as http headers to the application. so all you have to do in the application is to add some request authentication interceptor that inspects the headers.