Re: How to check if user is anonymous

2023-04-12 Thread Konrad Windszus
>> >> In the context of a Sling request the API to call would be >> https://javaee.github.io/javaee-spec/javadocs/javax/servlet/http/HttpServletRequest.html#getUserPrincipal-- >> : a null return value corresponds to the anonymous access. >> > > This does not work for me. I get back >

Re: How to check if user is anonymous

2023-04-12 Thread Konrad Windszus
Hi Angela, Thanks for the insights, > On 12. Apr 2023, at 11:15, Angela Schreiber wrote: > > Hi Konrad > > There is no public API to check that as it is an implementation detail that > the unauthenticated guest session is in oak backed by a user. > > So, I suspect the question you want to

Re: How to check if user is anonymous

2023-04-12 Thread Angela Schreiber
Hi Konrad There is no public API to check that as it is an implementation detail that the unauthenticated guest session is in oak backed by a user. So, I suspect the question you want to have an answer for is whether a given JCR session is an unauthenticated guest session or not. Is that

Re: How to check if user is anonymous

2023-04-12 Thread Konrad Windszus
The method at https://github.com/apache/jackrabbit-oak/blob/160d2be57c8e7733466a5bbe9ee88afaa2025c96/oak-security-spi/src/main/java/org/apache/jackrabbit/oak/spi/security/user/util/UserUtil.java#L56 requires to pass the org.apache.jackrabbit.oak.spi.security.ConfigurationParameters object, so I

How to check if user is anonymous

2023-04-12 Thread Konrad Windszus
How do I figure out if a org.apache.jackrabbit.api.security.user.User object is representing the anonymous user[1] or not. Unfortunately the interface only has methods isAdmin and isSystemUser [2] Any pointers appreciated. Thanks in advance, Konrad [1] -