Examples of org.apache.sling.auth.core.AuthenticationSupport.handleSecurity()

org.apache.sling.auth.core.AuthenticationSupport.handleSecurity()

Handles security on behalf of a custom OSGi Http Service HttpContext instance extracting credentials from the request using any registered {@link org.apache.sling.auth.core.spi.AuthenticationHandler} services.If the credentials can be extracted and used to log into the JCR repository this method sets the request attributes required by the OSGi Http Service specification plus the {@link #REQUEST_ATTRIBUTE_RESOLVER}attribute. @param request The HTTP request to be authenticated @param response The HTTP response to send any response to in case ofproblems. @return true if authentication succeeded and the requestattributes are set. If false is returned the request is immediately terminated and no request attributes are set.


            final String wsp = getWorkspace(request.getPathInfo());
            if (wsp != null) {
                request.setAttribute("j_workspace", wsp);
            }
            return localAuthenticator.handleSecurity(request, response);
        }
        // send 503/SERVICE UNAVAILABLE, flush to ensure delivery
        response.sendError(HttpServletResponse.SC_SERVICE_UNAVAILABLE);
        response.flushBuffer();


            // SLING-559: ensure correct parameter handling according to
            // ParameterSupport
            request = ParameterSupport.getParameterSupportRequestWrapper(request);


            return authenticator.handleSecurity(request, response);


        }


        log.error("handleSecurity: AuthenticationSupport service missing. Cannot authenticate request.");
        log.error("handleSecurity: Possible reason is missing Repository service. Check AuthenticationSupport dependencies.");


    public boolean handleSecurity(final HttpServletRequest request, final HttpServletResponse response)
            throws IOException {
        final AuthenticationSupport localAuthenticator = this.authenticator;
        if (localAuthenticator != null) {
            final boolean authResult = localAuthenticator.handleSecurity(request, response);
            if (authResult) {
                if (this.allowedUserIds.size() == 0) {
                    return true;
                } else {
                    final String userId = (String) request.getAttribute(HttpContext.REMOTE_USER);

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.