Custom Authentication Handler | Community
Skip to main content
A
Anonymous
October 16, 2015
Solved

Custom Authentication Handler

  • October 16, 2015
  • 3 replies
  • 1260 views

Hi I have a requirement where App A consumes restful services exposed by CQ. Some of these are from author and some are from publisher. In case of author we need to provide authentication for consuming restful services exposed by CQ. This authentication should be done against client DS server before passing credentials to CQ. For this I planned to create Custom Authentication handler. Some issue in this custom authentication handler. Here there is no form based authentication.

Public class CustomAuthHandler implements AuthenticationHandler {

//implements

extractCredentials():

requestCredentials():

dropCredentials():

}

I will be mapping this handler to my restful service path (it is servlet path). This authentication handler triggers and extractCredentials() method will be called. Here I am doing 3rd party authentication if it is success I will extract credentials from request header and send AuthenticationInfo object. It works fine. In case of failure also it works fine. But I just added return false in requestCredentials() method and nothing in dropCredentials(). As per API we need to give login form in requestCredentials and cleanup any sessions in dropCredentials but I am not sure what exactly I need to implement in these 2 methods for my requirement.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by Sham_HC

You can always returns false at requestCredentials because looking at your handler implementation never requests credentials itself. Instead it is provided through a different form.

In dropCredentials  can be used to remove the token node/ cookie that needs cleanup on logout .

3 replies

smacdonald2008
smacdonald2008
Level 10
October 16, 2015

Here is a good community artilce that may help you. It talks about creating a custom authentication handler:

http://www.wemblog.com/2013/03/how-to-create-custom-authentication.html

HTH

A
Anonymous
October 16, 2015

Hey Smac,

I was trying to reply to this thread but I don't know this blog is going down very frequently.

I saw that blog but in that Yogesh talks more about form authentication in my case there is no form.

Sham_HC
Sham_HCAccepted solution
Level 10
October 16, 2015

You can always returns false at requestCredentials because looking at your handler implementation never requests credentials itself. Instead it is provided through a different form.

In dropCredentials  can be used to remove the token node/ cookie that needs cleanup on logout .

Terms & ConditionsAccessibility statement

Loading footer...