The OpenID Authentication plugin stores Credentials in its own class, and uses that OpenIdCredentials class to decide whether or not it "owns" the authentication.

But Jackrabbit 2.0's AbstractLoginModule does a special check (supportsCredentials) in getCredentials to filter out any Credentials implementations other than SimpleCredentials and GuestCredentials. As a result, it looks like OpenIDAuthenticationHandler's canHandle will always end up getting "null" instead of the expected OpenIdCredentials.

Am I missing something, or are some more Sling changes needed to match Jackrabbit's current logic? (I could picture PluggableDefaultLoginModule adding a override of "supportsCredentials", for example.)

Thanks,
Ray

Reply via email to