Details
-
Improvement
-
Status: Closed
-
Major
-
Resolution: Fixed
-
Servlets Get 2.0.8
-
None
Description
The SessionInfoServlet currently returns the id and workspace of the logged-in JCR Session. To determine, whether the current request is actually authenticated or not, this is not enough information.
Adding a new property "authType" set to the value of the HttpServletRequest.getAuthType() method serves this purpose:
- The property is not set if the getAuthType() method returns null. The request is not authenticated in this case
- The value of the property not only indicates that the request is authenticated but also the kind of authentication which was used