[ 
https://issues.apache.org/jira/browse/SHINDIG-463?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12615295#action_12615295
 ] 

Brian Eaton commented on SHINDIG-463:
-------------------------------------

Rather than creating a separate AnonymousSecurityToken class it might be better 
to add isAnonymous() to existing classes with an appropriate implementation.  
It wouldn't be hard to create a new constructor on BasicSecurityToken for 
creating anonymous tokens.

Can you add to this patch (or create another patch) showing how the 
isAnonymous() method would be used elsewhere in Shindig?  I'm not sure I 
entirely understand what the anonymous token is supposed to accomplish.

> Support Anonymous Security Tokens
> ---------------------------------
>
>                 Key: SHINDIG-463
>                 URL: https://issues.apache.org/jira/browse/SHINDIG-463
>             Project: Shindig
>          Issue Type: Improvement
>          Components: Common Components (Java)
>            Reporter: Paul Lindner
>            Assignee: Paul Lindner
>         Attachments: anontoken.patch
>
>
> To support anonymous access for viewer/owner we need to support the concept 
> of an anonymous security token.
> To do this we should create an isAnonymous() method in the SecurityToken 
> interface and add a new implementation AnonymousSecurityToken.
> These tokens will throw InvalidArgumentException() when an attempt is made to 
> access any field.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to