Hi > we should definitly move the auth api into the sling api bundle (as > discussed) and as Felix mentioned, we should have form auth ready as > everyone needs this when playing around with Sling.
If we move auth api into the sling api shouldn't we finish the discussion about the decoupling of ResourceResolverFactory from the auth api? Felix made a proposal on [1] which I find is very good and I made a suggestion to get around the life cycle problem without the need of Felix ExtHttpService on [2] with a new SlingRequestListener . If the auth api should be moved into the sling api for the Sling 6 release, I propose to bring this discussion to an end before the release. [1] https://cwiki.apache.org/SLING/user-authentication.html [2] http://markmail.org/message/aovh7lll4w6uwepv best regards mike
