Ensure sling.auth.redirect is respected when changing impersonation
-------------------------------------------------------------------

                 Key: SLING-2390
                 URL: https://issues.apache.org/jira/browse/SLING-2390
             Project: Sling
          Issue Type: Improvement
          Components: Authentication
    Affects Versions: Auth Core 1.0.6
            Reporter: Felix Meschberger
            Assignee: Felix Meschberger
             Fix For: Auth Core 1.1.0


Currently the sling.auth.redirect request parameter is handled by 
AuthenticationFeedbackHandler services or the 
DefaultAuthenticationFeedbackHandler. The latter always respects the 
sling.auth.redirect while some authentication handlers may decide to only 
respect it when first authenticating.

If impersonation changes (indicated by a sudo request parameter having a 
different value than the current sudo cookie value) the sling.auth.redirect 
parameter should also be respected regardless of whether the actual 
AuthenticationFeedbackHandler respects the parameter or not.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to