You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sling.apache.org by "Bertrand Delacretaz (JIRA)" <ji...@apache.org> on 2013/09/27 15:23:02 UTC

[jira] [Commented] (SLING-3119) Startup Filter: move to HTTP filter to prevent authentication before startup has completed

    [ https://issues.apache.org/jira/browse/SLING-3119?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13779914#comment-13779914 ] 

Bertrand Delacretaz commented on SLING-3119:
--------------------------------------------

Thanks for your contribution! I have applied your patch in http://svn.apache.org/r1526891 and added logging of the filter pattern in http://svn.apache.org/r1526893

Please cross-check and mark this issue resolved if ok.
                
> Startup Filter: move to HTTP filter to prevent authentication before startup has completed
> ------------------------------------------------------------------------------------------
>
>                 Key: SLING-3119
>                 URL: https://issues.apache.org/jira/browse/SLING-3119
>             Project: Sling
>          Issue Type: Bug
>          Components: Extensions
>            Reporter: Ben Peter
>            Assignee: Bertrand Delacretaz
>            Priority: Minor
>         Attachments: SLING-3119.patch
>
>
> The current StartupFilter implementation is a Sling filter which prevents requests from being processed only after all HTTP filters have been called and authentication has been handled.
> Making this an HTTP filter registered with the Felix ExtHttpService would answer requests with 503 much earlier.
> Such a filter must still allow access to felix.webconsole.manager.root, typically /system/console

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira