Author: olli
Date: Wed Sep 17 19:50:30 2014
New Revision: 1625787
URL: http://svn.apache.org/r1625787
Log:
cleanup
Modified:
sling/site/trunk/content/documentation/the-sling-engine/authentication.mdtext
Modified:
sling/site/trunk/content/documentation/the-sling-engine/authentication.mdtext
URL:
http://svn.apache.org/viewvc/sling/site/trunk/content/documentation/the-sling-engine/authentication.mdtext?rev=1625787&r1=1625786&r2=1625787&view=diff
==============================================================================
---
sling/site/trunk/content/documentation/the-sling-engine/authentication.mdtext
(original)
+++
sling/site/trunk/content/documentation/the-sling-engine/authentication.mdtext
Wed Sep 17 19:50:30 2014
@@ -15,8 +15,6 @@ This method is called by the OSGi HTTP S
1. First the OSGi HTTP Service implementation is analyzing the request URL to
find a match for a servlet or resource registered with the HTTP Service.
1. Now the HTTP Service implementation has to call the `handleSecurity` method
of the `HttpContext` object with which the servlet or resource has been
registered. This method returns `true` if the request should be serviced. If
this method returns `false` the HTTP Service implementation terminates the
request sending back any response which has been prepared by the
`handleSecurity` method. Note, that the `handleSecurity` method must prepare
the failure response sent to the client, the HTTP Service adds nothing here. If
the `handleSecurity` method is successful, it must add two (or three) request
attributes described below.
1. When the `handleSecurity` method returns `true` the HTTP Service either
calls the `Servlet.service` method or sends back the requested resource
depending on whether a servlet or a resource has been selected in the first
step.
-{column}
-{section}
The important thing to note here is, that at the time the `handleSecurity`
method is called, the `SlingMainServlet` is not yet in control of the request.
So any functionality added by the `SlingMainServlet`, notably the
`SlingHttpServletRequest` and `SlingHttpServletResponse` objects are not
available to the implementation of the `handleSecurity` method.
