Examples of org.apache.wiki.auth.AuthenticationManager.login()

Logs in the user by attempting to populate a WikiSession Subject from a web servlet request by examining the request for the presence of container credentials and user cookies. The processing logic is as follows:

If the WikiSession had previously been unauthenticated, check to see if user has subsequently authenticated. To be considered "authenticated," the request must supply one of the following (in order of preference): the container userPrincipal, container remoteUser, or authentication cookie. If the user is authenticated, this method fires event {@link org.apache.wiki.event.WikiSecurityEvent#LOGIN_AUTHENTICATED}with two parameters: a Principal representing the login principal, and the current WikiSession. In addition, if the authorizer is of type WebContainerAuthorizer, this method iterates through the container roles returned by {@link org.apache.wiki.auth.authorize.WebContainerAuthorizer#getRoles()}, tests for membership in each one, and adds those that pass to the Subject's principal set.
If, after checking for authentication, the WikiSession is still Anonymous, this method next checks to see if the user has "asserted" an identity by supplying an assertion cookie. If the user is found to be asserted, this method fires event {@link org.apache.wiki.event.WikiSecurityEvent#LOGIN_ASSERTED}with two parameters: WikiPrincipal(cookievalue), and the current WikiSession.
If, after checking for authenticated and asserted status, the WikiSession is still anonymous, this method fires event {@link org.apache.wiki.event.WikiSecurityEvent#LOGIN_ANONYMOUS} withtwo parameters: WikiPrincipal(remoteAddress), and the current WikiSession

@param request servlet request for this user @return always returns true (because anonymous login, at least, will always succeed) @throws org.apache.wiki.auth.WikiSecurityException if the user cannot be logged in for any reason @since 2.3