[jira] Reopened: (SLING-1575) Authentication API and Handler Improvements

["Felix Meschberger (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SLING-1575?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Felix Meschberger reopened SLING-1575:
--------------------------------------


It looks like there is a problem with the new ResourceUtil implementation [1].

While there is no problem in using Resource interface implementations compiled against the previous version (missing the methods) as long as the new methods are not used, there is a problem when the new ResourceUtil implementations depend on the new Resource interface methods.

The solution here is probably to not depend on the new Resource interface methods in the ResourceUtil methods but keep the implementations and refer to them from the AbstractResource implementation.

[1] http://markmail.org/message/i3huzv6uleruzazq

> Authentication API and Handler Improvements
> -------------------------------------------
>
>                 Key: SLING-1575
>                 URL: https://issues.apache.org/jira/browse/SLING-1575
>             Project: Sling
>          Issue Type: Improvement
>          Components: API, Commons, Extensions
>            Reporter: Felix Meschberger
>            Assignee: Felix Meschberger
>             Fix For: Commons Auth 1.0.0, API 2.1.0
>
>
> Proposing the following enhancement to the Commons Auth bundle as well as the two existing form based authentication handlers (Form Based Authentication Handler and OpenID Authentication Handler):
>   * Create a new o.a.sling.api.auth package with the Authenticator interface and the NoAuthenticationHandler exception
>   * Create an AbstractAuthenticationFormServlet and AbstractAuthenticationHandler in Commons Auth (o.a.sling.commons.auth.spi)
>   * Extend the form servlets in the Form and OpenID handlers from the abstract form servlet
>   * Extend the authentication handlers from the abstract handler
> The new o.a.sling.api.auth package is the current o.a.sling.commons.auth package without the AuthenticationSupport interface. The reason for this is, that the Authenticator interface can be used by Sling applications to request users to login. The AuthenticationSupport interface on the other hand is closed tied into the Commons Auth implementation and is not generally used by Sling Applications.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.