[jira] Commented: (SLING-1240) Allow configuration of URL space open without credentials

["Justin Edelson (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SLING-1240?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12790800#action_12790800 ] 

Justin Edelson commented on SLING-1240:
---------------------------------------

Random thought - Does it make sense to include method as part of the configuration?

> Allow configuration of URL space open without credentials
> ---------------------------------------------------------
>
>                 Key: SLING-1240
>                 URL: https://issues.apache.org/jira/browse/SLING-1240
>             Project: Sling
>          Issue Type: Improvement
>          Components: Engine
>    Affects Versions: Engine 2.0.6
>            Reporter: Felix Meschberger
>
> Currently the SlingAuthenticator has a single flag -- auth.annonymous -- defining whether anonymous access is allowed or not.
> To allow for more flexibility it would be interesting to be able to partition the URL space into areas requiring authentication and ares not requiring authentication. As such the current situation just has a single area -- the complete URL space -- which may be configured to require authentication or not.
> Such configuration may be of different form:
>    * authentication handler declaring part of the URL space as requiring authentication
>    * SlingAuthenticator configuration listing regular expressions to partition the URL space into authentication requiring areas.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.