[SLING-1575] Authentication API and Handler Improvements

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: Auth Core 1.0.0, API 2.1.0
• Component/s: Authentication
• Assignee: Felix Meschberger
• Reporter: Felix Meschberger
• Created: 25/Jun/10 12:49
• Updated: 27/Aug/10 08:50
• Resolved: 30/Jul/10 08:59

Description

Proposing the following enhancement to the Commons Auth bundle as well as the two existing form based authentication handlers (Form Based Authentication Handler and OpenID Authentication Handler):

• Create a new o.a.sling.api.auth package with the Authenticator interface and the NoAuthenticationHandler exception
• Create an AbstractAuthenticationFormServlet and AbstractAuthenticationHandler in Commons Auth (o.a.sling.commons.auth.spi)
• Extend the form servlets in the Form and OpenID handlers from the abstract form servlet
• Extend the authentication handlers from the abstract handler

The new o.a.sling.api.auth package is the current o.a.sling.commons.auth package without the AuthenticationSupport interface. The reason for this is, that the Authenticator interface can be used by Sling applications to request users to login. The AuthenticationSupport interface on the other hand is closed tied into the Commons Auth implementation and is not generally used by Sling Applications.