Uploaded image for project: 'Jackrabbit Oak'
  1. Jackrabbit Oak
  2. OAK-4462

LoginModuleImpl: option to have AuthInfo populated with userId instead of loginName

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 1.7.0, 1.8.0
    • Component/s: core
    • Labels:
      None

      Description

      The current implementation of LoginModuleImpl always populates the AuthInfo with the userId as extracted from the Credentials or the shared state; doing so will make Session.getUserID() expose the 'login-id', which may or may not correspond to the ID of the corresponding User as it is expected to exist with this login module implementation.

      While this clearly is a design decision with the LoginModuleImpl and perfectly in accordance with the API contract of Session.getUserID(), there might be cases, where equality of Session.getUserID() and User.getID() would be desirable.

      So, we may think about adding an option to the default authentication; be it with LoginModuleImpl and|or the UserAuthenticationFactory|UserAuthentication.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                angela Angela Schreiber
                Reporter:
                angela Angela Schreiber
              • Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: