[ 
https://issues.apache.org/jira/browse/SHIRO-414?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Francois Papon updated SHIRO-414:
---------------------------------
    Fix Version/s: 2.0.0
                       (was: 2.0.0-alpha)

> Create generic HttpAuthenticationFilter supporting multiple HTTP 
> authentication schemes
> ---------------------------------------------------------------------------------------
>
>                 Key: SHIRO-414
>                 URL: https://issues.apache.org/jira/browse/SHIRO-414
>             Project: Shiro
>          Issue Type: New Feature
>          Components: Authentication (log-in), Web
>            Reporter: Les Hazlewood
>            Priority: Major
>             Fix For: 2.0.0
>
>
> The BasicHttpAuthentication filter assumes HTTP's 'Basic' authentication 
> scheme.  But HTTP Authentication can support multiple schemes - instead of 
> creating a filter per scheme, like we assume today, it probably makes sense 
> to have a single filter that can support multiple schemes.
> This issue is to create a general HttpAuthenticationFilter that allows one or 
> more pluggable Schemes.  Each Scheme should be able to resolve an 
> authentication token based on the {{Authorization}} header value.
> Existing authc filters (e.g. BasicHttpAuthenticationFilter) can leverage this 
> new concept if necessary - they would just be a filter that comes 
> pre-configured with a single scheme.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to