Bypassing CUG on asset directory

I think you can explore the brand portal or asset share commons. Please refer these links for more details. -https://medium.com/hoodoo-digital/do-you-need-brand-portal-or-asset-share-commons-4cdc6111326d  and https://experienceleague.adobe.com/en/docs/experience-manager-brand-portal/using/share/brand-portal-link-share 

Hello @gunars_v 

If its only few assets and you would want them to get to the assets only via link then you can look at the AEM built in feature to share assets as a link  - https://experienceleague.adobe.com/en/docs/experience-manager-cloud-service/content/assets/manage/share-assets#sharelink

Hope this helps!

Thanks

Narendra

Hi @gunars_v - There's no way to bypass the CUG that has been applied to restrict the asset access. AEM will need a login-token in the headers, to authenticate and determine the user's presence in CUG to serve the asset. So, you will have to rely on solution like Brand portal to get the asset accessible to a certain set of users.

Regards,

Hello @gunars_v,

There isn't a direct way to bypass authentication, but you can consider the following approach:

1. Create a service user with read access (using org.apache.sling.serviceusermapping.impl.ServiceUserMapperImpl) to the asset
2. Manage an authentication key (e.g., stored in page properties and restricted from general access).
3. Include the key as a parameter in the URL sent via email, which is mapped to a servlet internally.
4. When the URL is clicked, the servlet can:
   • Validate the authentication key.
   • Perform an internal login for the service user using TokenUtil.createCredentials().
   • Grant the user access to the gated asset.

See if this helps..

Thanks