Hi Hari
I guess unlike in our case, it would need an external identity provider in your case as you need to authenticate against a user repository outside AEM
In our POC all we required to do was to modify extractCredentials method to read username and password from headers . Pseudo code logic below . Please note it was only a POC to validate architecture and not a complete working solution
public AuthenticationInfo extractCredentials(HttpServletRequest request,
HttpServletResponse response) {
log.info("*** My Custom Authentication Handler: CustomAuthenticationHandler extractCredentials ***");
String uid = request.getHeader("username")
String pwd = request.getHeader("pwd");
AuthenticationInfo authInfo;
createCQUsers(uid,grp);
authInfo = new AuthenticationInfo(CustomAuthenticationHandler.AUTH_TYPE, uid, pwd.toCharArray());
notAuthenticated=authInfo.isEmpty();
return authInfo;
}
private Session session;
private java.util.Iterator<Authorizable> users = null ;
@Reference
private ResourceResolverFactory resolverFactory;
public String createCQUsers(String uid, String pwd)
{
ResourceResolver resourceResolver = resolverFactory.getAdministrativeResourceResolver(null);
session = resourceResolver.adaptTo(Session.class);
UserManager userManager = ((JackrabbitSession) session).getUserManager();
users= userManager.findAuthorizables("jcr:primaryType", "rep:User");
User newuser = userManager.createUser(uid,pwd);
session.save();
}
