You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@shiro.apache.org by "Jared Bunting (JIRA)" <ji...@apache.org> on 2011/08/13 15:31:27 UTC

[jira] [Commented] (SHIRO-283) Add ability to support basic auth and form authentication simultaneously

    [ https://issues.apache.org/jira/browse/SHIRO-283?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13084613#comment-13084613 ] 

Jared Bunting commented on SHIRO-283:
-------------------------------------

I am committing a fix that allows:
authc[permissive] and authcBasic[permissive].

This will allow us to, on a filterchain level, not require login but use these filters simply to allow login.  In addition, this will catch an "UnauthenticatedException" and perform the appropriate login request action (redirect to page or send challenge response).

> Add ability to support basic auth and form authentication simultaneously
> ------------------------------------------------------------------------
>
>                 Key: SHIRO-283
>                 URL: https://issues.apache.org/jira/browse/SHIRO-283
>             Project: Shiro
>          Issue Type: Bug
>            Reporter: Dan Diephouse
>         Attachments: permissive-authenticating2.patch
>
>
> Currently, it's impossible to require either form authentication or basic authentication. I need to support both since we want the former for the users using a browser and the later for REST. At a config level, I don't really care which one is used, I just want to know they're authenticated. 

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira