[SLING-1400] OPTIONS request on / returns login form if "Allow Anonymous Access" set to false

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: Auth Core 1.0.4
• Component/s: Authentication
• Assignee: Felix Meschberger
• Reporter: Bertrand Delacretaz
• Created: 22/Feb/10 13:20
• Updated: 20/Dec/10 14:50
• Resolved: 24/Sep/10 20:24

Description

If "Allow Anonymous Access" is true (that's the default default) in theorg.apache.sling.engine.impl.auth.SlingAuthenticator config, curl -X OPTIONS http://localhost:8888/ correctly returns a 401 status.

If the setting is false, the same request returns 200 and the login form.

Not sure if that's really a problem, but I thought I'd report it as it caused the WebDAV mount on / to become unusable with samples that recommend setting that parameter to false. I'll change the samples to use sling:authRequestLogin=true instead.

Issue Links

• is related to: SLING-1786 Integration tests for authentication