[SLING-2276] Support configurable anonymous user credentials

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Auth Core 1.0.6
• Fix Version/s: Auth Core 1.1.0
• Component/s: Authentication
• Assignee: Felix Meschberger
• Reporter: Felix Meschberger
• Created: 10/Nov/11 08:13
• Updated: 30/Nov/12 17:56
• Resolved: 18/Nov/11 23:41

Description

Currently anonymous access caused by missing credentials in the request is granted using the underlying repository's notion of anonymous user. This is achieved by calling ResourceResolverFactory.getResourceResolver with a null argument.

Sometimes, though, it may be the case, that the underlying ResourceProvider(s) do not grant access for null credentials. One such case might be a jackrabbit repository whose anonymous user has been disabled and Repository.login with null credentials would fail.

As discussed on the dev [1] and users [2] list, it might be helpful to be able to configure user name and password for assumed anonymous access.

[1] http://markmail.org/message/ovxno55hnfl74ufe
[2] http://markmail.org/message/i6sk2a6nyeehzde5