You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sling.apache.org by "Felix Meschberger (JIRA)" <ji...@apache.org> on 2009/10/15 15:20:31 UTC
[jira] Created: (SLING-1155) Add logout method to Authenticator
Add logout method to Authenticator
----------------------------------
Key: SLING-1155
URL: https://issues.apache.org/jira/browse/SLING-1155
Project: Sling
Issue Type: New Feature
Components: Engine
Affects Versions: Engine 2.0.4, Engine 2.0.6
Reporter: Felix Meschberger
Assignee: Felix Meschberger
Fix For: Engine 2.0.8
With the Sling Engine 2.0.4 the Authenticator interface has been introduced to support a generic way to have a user authenticated. This allows for an authentication agnostic way to force a user to login.
The drawback of the current solution is, that neither authentication handlers nor the Authenticator interface provide APi to logout a user again. This should be fixed as follows:
* Add an Authenticator.logout() method which logs out a user in a similar way the login method logs a user in
* Add a new AuthenticationHandler2 interface extending the AuthenticationHandler interface and providing a dropAuthentication method
which mirrors the AuthenticationHandler.requestAuthentication method.
* Add a LogoutServlet calling Authenticator.logout in a similar manner as the LoginServlet calls the login method
Authentication handlers supporting logging out just implement the AuthenticationHandler2 interface while still registering as a plain AuthenticationHandler. The Authenticator implementation in the Sling Engine bundle identifies the authentication handlers correctly to call or to not call the dropAuthentication method.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Closed: (SLING-1155) Add logout method to Authenticator
Posted by "Felix Meschberger (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-1155?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Felix Meschberger closed SLING-1155.
------------------------------------
Close after release
> Add logout method to Authenticator
> ----------------------------------
>
> Key: SLING-1155
> URL: https://issues.apache.org/jira/browse/SLING-1155
> Project: Sling
> Issue Type: New Feature
> Components: Authentication
> Affects Versions: Engine 2.0.4, Engine 2.0.6
> Reporter: Felix Meschberger
> Assignee: Felix Meschberger
> Fix For: Auth Core 1.0.0
>
>
> With the Sling Engine 2.0.4 the Authenticator interface has been introduced to support a generic way to have a user authenticated. This allows for an authentication agnostic way to force a user to login.
> The drawback of the current solution is, that neither authentication handlers nor the Authenticator interface provide APi to logout a user again. This should be fixed as follows:
> * Add an Authenticator.logout() method which logs out a user in a similar way the login method logs a user in
> * Add a new AuthenticationHandler2 interface extending the AuthenticationHandler interface and providing a dropAuthentication method
> which mirrors the AuthenticationHandler.requestAuthentication method.
> * Add a LogoutServlet calling Authenticator.logout in a similar manner as the LoginServlet calls the login method
> Authentication handlers supporting logging out just implement the AuthenticationHandler2 interface while still registering as a plain AuthenticationHandler. The Authenticator implementation in the Sling Engine bundle identifies the authentication handlers correctly to call or to not call the dropAuthentication method.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (SLING-1155) Add logout method to Authenticator
Posted by "Felix Meschberger (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-1155?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Felix Meschberger updated SLING-1155:
-------------------------------------
Component/s: Authentication
(was: Engine)
(was: Commons)
> Add logout method to Authenticator
> ----------------------------------
>
> Key: SLING-1155
> URL: https://issues.apache.org/jira/browse/SLING-1155
> Project: Sling
> Issue Type: New Feature
> Components: Authentication
> Affects Versions: Engine 2.0.4, Engine 2.0.6
> Reporter: Felix Meschberger
> Assignee: Felix Meschberger
> Fix For: Auth Core 1.0.0
>
>
> With the Sling Engine 2.0.4 the Authenticator interface has been introduced to support a generic way to have a user authenticated. This allows for an authentication agnostic way to force a user to login.
> The drawback of the current solution is, that neither authentication handlers nor the Authenticator interface provide APi to logout a user again. This should be fixed as follows:
> * Add an Authenticator.logout() method which logs out a user in a similar way the login method logs a user in
> * Add a new AuthenticationHandler2 interface extending the AuthenticationHandler interface and providing a dropAuthentication method
> which mirrors the AuthenticationHandler.requestAuthentication method.
> * Add a LogoutServlet calling Authenticator.logout in a similar manner as the LoginServlet calls the login method
> Authentication handlers supporting logging out just implement the AuthenticationHandler2 interface while still registering as a plain AuthenticationHandler. The Authenticator implementation in the Sling Engine bundle identifies the authentication handlers correctly to call or to not call the dropAuthentication method.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (SLING-1155) Add logout method to Authenticator
Posted by "Felix Meschberger (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-1155?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12766068#action_12766068 ]
Felix Meschberger commented on SLING-1155:
------------------------------------------
Implemented first shot in Rev. 825501.
Now running this through the launchpad integration test to make sure it does not break anything ...
> Add logout method to Authenticator
> ----------------------------------
>
> Key: SLING-1155
> URL: https://issues.apache.org/jira/browse/SLING-1155
> Project: Sling
> Issue Type: New Feature
> Components: Engine
> Affects Versions: Engine 2.0.4, Engine 2.0.6
> Reporter: Felix Meschberger
> Assignee: Felix Meschberger
> Fix For: Engine 2.1.0
>
>
> With the Sling Engine 2.0.4 the Authenticator interface has been introduced to support a generic way to have a user authenticated. This allows for an authentication agnostic way to force a user to login.
> The drawback of the current solution is, that neither authentication handlers nor the Authenticator interface provide APi to logout a user again. This should be fixed as follows:
> * Add an Authenticator.logout() method which logs out a user in a similar way the login method logs a user in
> * Add a new AuthenticationHandler2 interface extending the AuthenticationHandler interface and providing a dropAuthentication method
> which mirrors the AuthenticationHandler.requestAuthentication method.
> * Add a LogoutServlet calling Authenticator.logout in a similar manner as the LoginServlet calls the login method
> Authentication handlers supporting logging out just implement the AuthenticationHandler2 interface while still registering as a plain AuthenticationHandler. The Authenticator implementation in the Sling Engine bundle identifies the authentication handlers correctly to call or to not call the dropAuthentication method.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (SLING-1155) Add logout method to Authenticator
Posted by "Felix Meschberger (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-1155?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Felix Meschberger updated SLING-1155:
-------------------------------------
Component/s: Commons
Fix Version/s: Commons Auth 1.0.0
Reassigning this issue to be fixed in both the next Engine and Commons Auth releases.
> Add logout method to Authenticator
> ----------------------------------
>
> Key: SLING-1155
> URL: https://issues.apache.org/jira/browse/SLING-1155
> Project: Sling
> Issue Type: New Feature
> Components: Commons, Engine
> Affects Versions: Engine 2.0.4, Engine 2.0.6
> Reporter: Felix Meschberger
> Assignee: Felix Meschberger
> Fix For: Engine 2.1.0, Commons Auth 1.0.0
>
>
> With the Sling Engine 2.0.4 the Authenticator interface has been introduced to support a generic way to have a user authenticated. This allows for an authentication agnostic way to force a user to login.
> The drawback of the current solution is, that neither authentication handlers nor the Authenticator interface provide APi to logout a user again. This should be fixed as follows:
> * Add an Authenticator.logout() method which logs out a user in a similar way the login method logs a user in
> * Add a new AuthenticationHandler2 interface extending the AuthenticationHandler interface and providing a dropAuthentication method
> which mirrors the AuthenticationHandler.requestAuthentication method.
> * Add a LogoutServlet calling Authenticator.logout in a similar manner as the LoginServlet calls the login method
> Authentication handlers supporting logging out just implement the AuthenticationHandler2 interface while still registering as a plain AuthenticationHandler. The Authenticator implementation in the Sling Engine bundle identifies the authentication handlers correctly to call or to not call the dropAuthentication method.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (SLING-1155) Add logout method to Authenticator
Posted by "Felix Meschberger (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-1155?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Felix Meschberger updated SLING-1155:
-------------------------------------
Fix Version/s: (was: Engine 2.1.0)
Actually, even though the original work has still been applied to the Sling Engine bundle, this has been moved to the Commons Auth bundle and thus this fix applies to the Commons Auth 1.0 release only.
> Add logout method to Authenticator
> ----------------------------------
>
> Key: SLING-1155
> URL: https://issues.apache.org/jira/browse/SLING-1155
> Project: Sling
> Issue Type: New Feature
> Components: Commons, Engine
> Affects Versions: Engine 2.0.4, Engine 2.0.6
> Reporter: Felix Meschberger
> Assignee: Felix Meschberger
> Fix For: Commons Auth 1.0.0
>
>
> With the Sling Engine 2.0.4 the Authenticator interface has been introduced to support a generic way to have a user authenticated. This allows for an authentication agnostic way to force a user to login.
> The drawback of the current solution is, that neither authentication handlers nor the Authenticator interface provide APi to logout a user again. This should be fixed as follows:
> * Add an Authenticator.logout() method which logs out a user in a similar way the login method logs a user in
> * Add a new AuthenticationHandler2 interface extending the AuthenticationHandler interface and providing a dropAuthentication method
> which mirrors the AuthenticationHandler.requestAuthentication method.
> * Add a LogoutServlet calling Authenticator.logout in a similar manner as the LoginServlet calls the login method
> Authentication handlers supporting logging out just implement the AuthenticationHandler2 interface while still registering as a plain AuthenticationHandler. The Authenticator implementation in the Sling Engine bundle identifies the authentication handlers correctly to call or to not call the dropAuthentication method.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (SLING-1155) Add logout method to Authenticator
Posted by "Felix Meschberger (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-1155?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12797971#action_12797971 ]
Felix Meschberger commented on SLING-1155:
------------------------------------------
Documentation has been updated on the http://sling.apache.org/site/authentication.html page
> Add logout method to Authenticator
> ----------------------------------
>
> Key: SLING-1155
> URL: https://issues.apache.org/jira/browse/SLING-1155
> Project: Sling
> Issue Type: New Feature
> Components: Commons, Engine
> Affects Versions: Engine 2.0.4, Engine 2.0.6
> Reporter: Felix Meschberger
> Assignee: Felix Meschberger
> Fix For: Commons Auth 1.0.0
>
>
> With the Sling Engine 2.0.4 the Authenticator interface has been introduced to support a generic way to have a user authenticated. This allows for an authentication agnostic way to force a user to login.
> The drawback of the current solution is, that neither authentication handlers nor the Authenticator interface provide APi to logout a user again. This should be fixed as follows:
> * Add an Authenticator.logout() method which logs out a user in a similar way the login method logs a user in
> * Add a new AuthenticationHandler2 interface extending the AuthenticationHandler interface and providing a dropAuthentication method
> which mirrors the AuthenticationHandler.requestAuthentication method.
> * Add a LogoutServlet calling Authenticator.logout in a similar manner as the LoginServlet calls the login method
> Authentication handlers supporting logging out just implement the AuthenticationHandler2 interface while still registering as a plain AuthenticationHandler. The Authenticator implementation in the Sling Engine bundle identifies the authentication handlers correctly to call or to not call the dropAuthentication method.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Reopened: (SLING-1155) Add logout method to Authenticator
Posted by "Felix Meschberger (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-1155?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Felix Meschberger reopened SLING-1155:
--------------------------------------
reopen to fix the issue state
> Add logout method to Authenticator
> ----------------------------------
>
> Key: SLING-1155
> URL: https://issues.apache.org/jira/browse/SLING-1155
> Project: Sling
> Issue Type: New Feature
> Components: Commons, Engine
> Affects Versions: Engine 2.0.4, Engine 2.0.6
> Reporter: Felix Meschberger
> Assignee: Felix Meschberger
> Fix For: Commons Auth 1.0.0
>
>
> With the Sling Engine 2.0.4 the Authenticator interface has been introduced to support a generic way to have a user authenticated. This allows for an authentication agnostic way to force a user to login.
> The drawback of the current solution is, that neither authentication handlers nor the Authenticator interface provide APi to logout a user again. This should be fixed as follows:
> * Add an Authenticator.logout() method which logs out a user in a similar way the login method logs a user in
> * Add a new AuthenticationHandler2 interface extending the AuthenticationHandler interface and providing a dropAuthentication method
> which mirrors the AuthenticationHandler.requestAuthentication method.
> * Add a LogoutServlet calling Authenticator.logout in a similar manner as the LoginServlet calls the login method
> Authentication handlers supporting logging out just implement the AuthenticationHandler2 interface while still registering as a plain AuthenticationHandler. The Authenticator implementation in the Sling Engine bundle identifies the authentication handlers correctly to call or to not call the dropAuthentication method.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Resolved: (SLING-1155) Add logout method to Authenticator
Posted by "Felix Meschberger (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-1155?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Felix Meschberger resolved SLING-1155.
--------------------------------------
Resolution: Fixed
Issue is really fixed.
> Add logout method to Authenticator
> ----------------------------------
>
> Key: SLING-1155
> URL: https://issues.apache.org/jira/browse/SLING-1155
> Project: Sling
> Issue Type: New Feature
> Components: Commons, Engine
> Affects Versions: Engine 2.0.4, Engine 2.0.6
> Reporter: Felix Meschberger
> Assignee: Felix Meschberger
> Fix For: Commons Auth 1.0.0
>
>
> With the Sling Engine 2.0.4 the Authenticator interface has been introduced to support a generic way to have a user authenticated. This allows for an authentication agnostic way to force a user to login.
> The drawback of the current solution is, that neither authentication handlers nor the Authenticator interface provide APi to logout a user again. This should be fixed as follows:
> * Add an Authenticator.logout() method which logs out a user in a similar way the login method logs a user in
> * Add a new AuthenticationHandler2 interface extending the AuthenticationHandler interface and providing a dropAuthentication method
> which mirrors the AuthenticationHandler.requestAuthentication method.
> * Add a LogoutServlet calling Authenticator.logout in a similar manner as the LoginServlet calls the login method
> Authentication handlers supporting logging out just implement the AuthenticationHandler2 interface while still registering as a plain AuthenticationHandler. The Authenticator implementation in the Sling Engine bundle identifies the authentication handlers correctly to call or to not call the dropAuthentication method.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.