Details
-
Improvement
-
Status: Closed
-
Major
-
Resolution: Fixed
-
None
-
None
Description
Felix made a good proposal how to decouple the authentication mechanism from JCR at [1] after the discussion at [2]. The remaining issue there was how to ensure JCR sessions which are placed into AuthenticationInfo be closed. To solve that issue we now can use the new SlingRequestListener [3].
[1] https://cwiki.apache.org/SLING/user-authentication.html
[2] http://markmail.org/message/aovh7lll4w6uwepv
[3] https://issues.apache.org/jira/browse/SLING-1576