[SLING-1361] The Authenticator.login method is specified to complete the response but it currently is not enforced

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: Auth Core 1.0.0
• Component/s: Authentication
• Assignee: Felix Meschberger
• Reporter: Felix Meschberger
• Created: 09/Feb/10 10:51
• Updated: 27/Aug/10 08:50
• Resolved: 09/Feb/10 13:39

Description

The Authenticator.login method is specified to complete the response to the client. This currently depends on the login handlers to actually send a response back.

If none of the handlers actually commits the response, for example the HTTP Basic handler just does nothing and the Form Based Authentication Handler just clears the cookie, the login method implementation should probably handle finishing the response by redirecting back to either the refere (if any) or to the servlet context root.