[SLING-852] PluggableLoginModule to provide DefaultLoginModule extensions via bundle services

• Type: New Feature
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: JCR Jackrabbit Server 2.0.2
• Fix Version/s: JCR Jackrabbit Server 2.0.4
• Component/s: JCR
• Assignee: Felix Meschberger
• Reporter: Rory Douglas
• Created: 08/Feb/09 15:56
• Updated: 21/Jul/09 10:22
• Resolved: 08/Feb/09 22:02

Description

Enhance the Jackrabbit Server module by adding a PluggableDefaultLoginModule extending DefualtLoginModule and a LoginModulePlugin interface. The PluggableDefaultLoginModule uses the LoginModulePlugin instances to verify the credentials presented by the user.

The PluggableDefaultLoginModule falls back to the DefaultLoginModule implementation if there is not support for the Credentials instance presented.

This approach allows custom AuthenticationHandlers to provide custom login behavior for the Credentials they pass to the SlingAuthenticator - particularly useful when no password is made available to the handler by the authentication process.