[CONF] Apache Sling > Solving the Authentication Handler Credential Validation Problem

[Alexander Klimetschek (Confluence)]

Alexander Klimetschek hat einen Kommentar zu Seite bearbeitet: Solving the Authentication Handler Credential Validation Problem I had some ideas on the list about list about using SlingRepository.loginService() in preauthenticated auth handlers (plus that "user.identified" username) as a way to do the login. Then by configuring the service user mapping (whitelisted) you can restrict which service/auth handler can do that. Then loginAdministrative() usages can be removed from auth handlers, as well as all other broad trust mechanisms (trusted credentials attribute, null login?, etc.). This might already be covered by this proposal, but I am not 100% sure. Online anzeigen · Gefällt mir · Antworten Überwachung des Bereichs beenden · Benachrichtigungen verwalten Diese Nachricht wurde von Atlassian Confluence 5.0.3, der Kollaborationssoftware für Teams, gesendet