This is an automated email from the ASF dual-hosted git repository.

rombert pushed a change to annotated tag org.apache.sling.auth.core-1.0.0
in repository 
https://gitbox.apache.org/repos/asf/sling-org-apache-sling-auth-core.git.


      at aa8d227  (tag)
 tagging 23464e4dfeeeacbceaac41be7360407d37c8e1ec (commit)
      by Felix Meschberger
      on Mon Aug 23 16:21:14 2010 +0000

- Log -----------------------------------------------------------------
org.apache.sling.auth.core-1.0.0
-----------------------------------------------------------------------

This annotated tag includes the following new commits:

     new 0af8046  SLING-966 Commit first shot at Commons Auth bundle
     new 3274590  Small doco fix
     new 2e39867  SLING-966 slight constructor modification removing the 
Credentials constructors.
     new 6864fea  Some javadoc fixes.
     new 9d71828  SLING-1280 Rename methods of the (new) AuthenticationHandler 
interface to better reflect their tasks
     new f28b2de  Improve log message if anonymous access is not allowed
     new a0e733c  FIx some javadocs
     new 892d7fe  JavaDoc and define logger as instance field instead of static 
field
     new 60058b8  SLING-1287 Ensure the impersonation cookie's value is 
properly quoted if it contains non-token characters. For ease of 
implementation, we always quote the cookie when setting but accept unquoted 
cookies when reading.
     new a90d8fb  SLING-1291 Set the user name from the request credentials as 
"impersonator" session attribute upon impersonation.
     new ef5a28c  SLING-1292 logout original session upon impersonation
     new 15d4100  SLING-1293 Terminate impersonation handling if impersonation 
fails and continue request processing with the primary authenticated user
     new db50f66  SLING-1297 wrap new 
org.apache.sling.commons.auth.NoAuthenticationHandlerException in old 
org.apache.sling.engine.auth.NoAuthenticationHandlerException to support 
backwards compatibility.
     new 34fe025  Remove wrong since information.
     new f6b4cbc  SLING-1294 support redirect after successful authentication
     new 470d088  SLING-1300 Make sure authentication requirements of 
registered services are not lost due to dynamic reconfiguration. Also extended 
the internal storage to be able to list information on who provided the 
requirement.
     new 2585041  Fix wrong service name (missed that when refactoring the 
Authentication Handler into the spi package).
     new be76055  SLING-1306 Use a ServiceTracker to track authentication 
handler services to be able to catch service registration property changes.
     new 5fbfe8d  SLING-1307 handle exceptions thrown by the login method such 
that a 403 status can be sent back to the client instead of an internal server 
error for an uncaught RuntimeException
     new a714b72  Fix javadoc.
     new b28073c  Correct svn location.
     new 06cd759  Fix remove method to return null *if* the key is AUTH_TYPE 
(see comments in SLING-1314 for details).
     new 8cda37f  Use latest jcr api to decouple modules from jcr 1.0 
(contained in older jcr api releases)
     new 09e5fe6  SLING-1314 Apply proposed patch supporting authentication 
feedback after trying to login
     new ff721e5  Some comments ...
     new 8bffd9c  SLING-1361 Ensure the client is redirected to some resonable 
place after logout has been processed
     new d62afb8  SLING-1368 Add support to order authentication handlers and 
requirements by ServiceReference (service.rank, service.id) in addition to the 
path.
     new 3575496  Fix javadocs.
     new 052bbb1  SLING-1375 Allow authentication handler to convey failure to 
extract existing credentials to Sling Authenticator and add unit tests for the 
AuthenticationInfo class
     new 5649404  SLING-1382 Define new AuthenticationHandler constants for 
authentication type definition and requiring and implement support
     new 361c3f0  SLING-1419 : Remove dependency to JCR
     new 250dc33  SLING-1444 - adding AuthenticationInfoPostProcessor
     new 9e0bb6d  SLING-1445 - storing AuthenticationInfo object in request 
attribute
     new dbbc5fb  SLING-1444 - fixing NPE when no PostProcessors
     new 22731fa  SLING-1383 : Provide out-of-the-box HTTP Basic authentication 
handler in the Commons Auth bundle
     new 618bf31  SLING-1493 Prevent binding to an authentication handler which 
cannot be accessed
     new 00ecd48  SLING-1508 : Default auth handlers are not considered if a 
handler has a protocol or host
     new 55ab4ff  Use released parent pom.
     new dcf5c4c  SLING-1447 : support for resource paths containing workspace 
name - remove workspace support from commons auth again
     new a29cc56  Correctly extract user information.
     new 6458072  SLING-1534 - switching SlingAuthenticator to use only 
ResourceResolverFactory API
     new e28aa45  SLING-1541 - adding getUserID() method to ResourceResolver
     new 0862ba0  Change title of configuration to align it with the bundle 
name and the actual task
     new a74069c  removing old comment
     new 0e12521  SLING-1575 Move Authenticator interface and 
NoAuthenticationHandlerException to Sling API and adapt Commons Auth 
implementation. Also fixed Sling API package export version to 2.1 except new 
auth package which is exported as version 1.0
     new dbc2ba8  SLING-1575 Import o.a.s.api.auth package with an 
implementor's version range (bundle plugin will log warnings, but it works 
correctly) and fix the @scr.service tag to refer to the correct interface name 
in the SlingAuthenticator class
     new 2466fc3  SLING-1575 Do not declare the abstract component to register 
as a Servlet service and leave this to the implementation to be done.
     new d7295a3  SLING-1575 Better remove the @scr tags altogether from the 
abstract class (same as the AbstractAuthenticationHandler which also does not 
have the tags)
     new 22cec56  SLING-1618 Remove unneeded private constant. Functionality 
using this constant is now part of the JcrResourceResolverFactoryImpl class.
     new 7813cae  Add metatype name and descriptor for the realm property
     new 5307d06  Correct javadoc
     new 255049d  SLING-1641 Make embedded HTTP Authenticator more robust 
towards the client requests
     new 185b10f  SLING-1445 Do not set the AuthenticationInfo as a request 
attribute any more
     new 4b76526  SLING-1647 Remove old constant definitions (now moved to 
ResourceResolverFactory and JcrResourceConstants) and adapt the code and remove 
the check for the Credentials property not appropriate here.
     new 6618446  SLING-1650 Consolidate authentication stuff in a new auth 
component; * rename commons/auth to auth/core * rename extensions/formauth to 
auth/form * rename extensions/openidauth to auth/openid
     new e6cf2ff  SLING-1650 Refactor auth/core, auth/form, auth/openid for the 
new packages identifying the auth component and refer to the new auth/core for 
the authentication handlers.
     new 46c2801  SLING-1650 remove unused package
     new edcbf59  SLING-1650 remove unused package
     new de55107  SLING-1656 Unconditionally send back a 401/UNAUTHORIZED 
response from the requestCredentials method if no other authentication handler 
was willing to request credentials. Same for the extractCredentials method: The 
built-in HTTP Basic handler is only called if no other credentials handler was 
willing to handle the request. So the handler will first try to extract the 
authentication header and if missing request credentials if the 
sling:authRequestLogin parameter is set t [...]
     new 1683ff1  SLING-1654 Only set the Resource Resolver as a request 
attribute (besides the attributes required the by OSGi Http Service spec).
     new 336925e  SLING-1654 - cleanup javadoc
     new 2cf4c95  Fix javadocs
     new 8800de9  SLING-1593 Decouple authentication mechanism from JCR
     new 6e75aaf  SLING-1668 dynamically import the JCR API
     new 538d3c4  SLING-1669 Only set the "resource" target request attribute 
to the request URL if neither the parameter is present nor the attribute is 
already set.
     new c0c3533  Code format
     new 8532f52  SLING-1679 Use Apache Felix SCR Annotations (instead of @scr 
JavaDoc tags)
     new 16550d3  SLING-1678 Add support to disable built-in HTTP Basic 
Authentication Handler SLING-1679 Use Apache Felix SCR Annotations (instead of 
@scr JavaDoc tags)
     new 7b64eca  SLING-1678 Metatype Service labels
     new 55d50cd  Set JIRA version id and fix JavaDoc exclusions
     new 987afeb  Update to Sling API 2.1.0
     new e0b4cd0  [maven-release-plugin] prepare release 
org.apache.sling.auth.core-1.0.0
     new 23464e4  [maven-scm] copy for tag org.apache.sling.auth.core-1.0.0

The 73 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


-- 
To stop receiving notification emails like this one, please contact
['"[email protected]" <[email protected]>'].

Reply via email to