[SLING-2998] SlingAuthenticator fails because of pathInfo being null

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Auth Core 1.1.2
• Fix Version/s: Auth Core 1.1.4
• Component/s: Authentication
• Labels: security
• Environment: Sling, CQ
• Assignee: Oliver Lietz
• Reporter: Oliver Lietz
• Created: 06/Aug/13 15:16
• Updated: 04/Apr/14 14:19
• Resolved: 13/Sep/13 14:26

Description

• HttpServletRequest#getPathInfo():String returns null, use HttpServletRequest#getServletPath():String instead
• path should never be changed to /, instead return anonymous credentials/false

http://mail-archives.apache.org/mod_mbox/sling-users/201308.mbox/[e-mail]%3e

Issue Links

• is related to: SLING-722 NullPotinerException trying to authenticate when requesting the SlingMainServlet directly
• relates to: SLING-3492 failed authentication when Sling is deployed in an app server