CODEWITHSUNDEEP
apachedigest-authenticationsling
user481572
user481572

Reputation:

Is digest authentication in Apache Sling possible?

Is digest auth possible in Apache Sling? If so any pointers appreciated!

Upvotes: 2

Views: 411

Answers (2)

fmeschbe
fmeschbe

Reputation: 321

Theoretically digest would be possible. But since Jackrabbit stores user passwords in hashed form it would probably not be easy to implemented.

IMHO using SSL with Basic Authentication might be preferrable to using Digest authentication.

Or you might want to consider different authentication mechanisms such as OpenID.

Upvotes: 0

stevex
stevex

Reputation: 5827

It's not currently supported but it's definitely possible to add it.

In Sling, an AuthenticationHandler extracts credentials from an HTTP request for authentication by JackRabbit. The source for the standard HTTP AuthenticationHandler is here:

http://svn.apache.org/repos/asf/sling/trunk/bundles/auth/form/src/main/java/org/apache/sling/auth/form/impl/

It doesn't currently support digest authentication, but would serve as a starting point for building it.

Upvotes: 2

Related Questions