[SLING-5792] API to manage Authentication Requirement

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Won't Fix
• Component/s: Authentication
• Assignee: Carsten Ziegeler
• Reporter: Angela Schreiber
• Created: 16/Jun/16 11:52
• Updated: 26/Aug/16 06:05
• Resolved: 26/Aug/16 06:05

Description

Apart from the constant AuthConstants.AUTH_REQUIREMENTS there is no public API available that allowed applications to change the list of authentication requirement entries.

Instead, applications need to know and rely on implementation details, which not only includes registering services with the AuthConstants.AUTH_REQUIREMENTS property included but also know about the required format of the property, which from my point of view should be and remain an implementation detail of org.apache.sling.auth.core.impl.SlingAuthenticator, which IMO should not be considered public API.

To me it would feel more natural if there existed a AuthenticationRequirement interface defining methods to extend/update/clear the auth-requirements bound to a particular service reference and having org.apache.sling.auth.core.impl.SlingAuthenticator implementing that interface.

Doing so, might also be beneficial from a performance/scalability POV but I would like to cover that in a separate sub-task.

Proposal for this sub-tasks will follow as I am moving forward.

Issue Links

• contains: SLING-5795 Allow for adding/removing individual AuthenticationRequirementHolder entries
• relates to: SLING-5795 Allow for adding/removing individual AuthenticationRequirementHolder entries
• links to: GitHub Pull Request #153