Uploaded image for project: 'Sling'
  1. Sling
  2. SLING-1368

Support ordering of authentication handlers

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • Auth Core 1.0.0
    • Authentication
    • None

    Description

      Right now authentication handlers are only ordered by their registration path. If multiple authentication handlers are registered for the same path, the order at which they are asked is basically undefined.

      It would be useful to be able to control this order using the regular service.ranking service registration property.

      One use of such ordering would be to be able to better control which authentication handler should be in charge of requesting credentials. For example, a high priority "pseudo authentication handler" could be provided, which just renders login forms. Such a provider could provide forms for both form based authentication and OpenID authentication and support the client in selecting which form of authentication she/he selects.

      Such an authentication handler should of course have precedence in terms of requesting credentials over the other authentication handlers. Adding support for service.ranking would solve this problem.

      Attachments

        Issue Links

          Activity

            People

              fmeschbe Felix Meschberger
              fmeschbe Felix Meschberger
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: