Hi Thierry Thanks for answering. No, we do not have same userid/pwd for all our customers. The custom guard class we have developed checks for different kinds of authentication depending upon who our partner is. Some partner send us token and we validate that with their SSO server, some does LDAP authentication etc etc.
But this authentication is just to recognize that the request is coming from a legit partner and not from some tom,dick or harry. Now after this authentication happens the actual logic starts. Say someone from organization X wants to delete a wiki page. He requests for a delete. At part of deletion we have to ask for that user's userid/password and which domain he belongs. A user can belong to many domains. This user/pwd is different from the guard authentication credentials. Thats why we need entity in DELETE also. But as Rob said that due to some proxy filters not allowing entities in get and delete, so we have created separate resource URI for delete requests and use POST/PUT to delete the resource on the server. Regards Surjendu
