[JCR-2355] Support easy pre-authenticated login

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0-alpha11
• Fix Version/s: 2.0-beta1
• Component/s: jackrabbit-core
• Assignee: Unassigned
• Reporter: Felix Meschberger
• Created: 14/Oct/09 06:40
• Updated: 11/Jan/10 14:16
• Resolved: 14/Oct/09 13:29

Description

Some applications authenticate users themselves and just need to access the repository on behalf of these pre-authenticated users.

Examples of such pre-authentications include SSO solutions or web applications using a web-based authentication protocol not easily implementable in a JAAS LoginModule, for example OpenID or similar.

In such situations a password may not be provided in SimpleCredentials and thus regular login with user name and password is not possible.

Therefore I propose the enhancement of the AbstractLoginModule to allow for setting a specific attribute in the SimpleCredentials attribute map. If this attribute is set, authentication and login succeeds and a session for the user named in the SimpleCredentials is created.

As a starter we might just check for the presence of the attribute.