Hm, that sounds quite problematic, because you need to proxy a request.
If you are familiar with the QueryBuilder java API, you could write your
own servlet, which checks against the external system and then uses the
QueryBuilder API directly. You don't start a new HTTP request, but
instead approach the API directly. And then you can also pass a
different JCR session than the session the user is using; for example
you can use a JCR system user.
User info is exposed by
For the curl request PUT /api/assets/myfolder/myAsset.png
-H"Content-Type: image/png" --data-binary @myPicture.pngEach part may be
encoded and the "Content-Transfer-Encoding" header supplied if the value
of that part does not conform to the default (7BIT) encoding (see
[RFC2045], section 6)Not sure but found at