Apache sling authentication service not work

[Johann_Lu]

I added "-/libs/wcm/core/content/reference" in Authentication Requirements list, but it didn't work. I still need to login when I accessed this link.

Is there anyone who can assist me?

[aanchal-sikka]

@Johann_Lu 

Why are we trying to get it out of authentication? 

This URL in turn uses Content and reference information, which would also need session. 

[Johann_Lu]

I want to get all the resources associated with a content when it is published.

[aanchal-sikka]

@Johann_Lu 

Please refer to this thread on https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/how-to-find-the-list-of-al... 

[Johann_Lu]

I need all the reference, not just assets.

[aanchal-sikka]

@Johann_Lu 

• The "libs/wcm/core/content/reference" internally calls com.day.cq.wcm.core.impl.reference.ActivationReferenceSearchServlet. 
• The servlet uses  

  com.day.cq.wcm.core.reference.ActivationReferenceSearchService

•  These are part of cq-wcm-core bundle

You can use getReferences() of this Service to get all References

[Johann_Lu]

Can't find this method in this jar package.

[aanchal-sikka]

@Johann_Lu 

You are right this bundle is not available publicly, although the API is available in AEM.

One suggestion:

As per my understanding, just the Asset reference for replication should suffice for majority of the use-cases.

The other cases, where one might need template/policies, these are generally not meant to be replicated with pages every time. So any template-editor should publish them after editing.  These should be process-oriented.

If we allow read access to content along with the Reference URL and the servlet, it would open too much info for an anonymous user

[Johann_Lu]

I understood, but I do need all the reference reference，including policy, template and so on. Are there any other methods?

[Johann_Lu]

Or is there any way to get all the reference of a content?

[Jagadeesh_Prakash]

@Johann_Lu  can you please elaborate a bit on this. What exactly are you trying to do 

[Johann_Lu]

I want to get all the resources associated with a content when it is published

[Johann_Lu]

Is there any way to get all the reference of a content?

[Jörg_Hoh]

authentication != authorization.

When you are not authenticated, then the system will consider you as the anonymous user; and if you invoke this functionality with anonymous user (which cannot read any content on author) you will get an empty result.

[HrishikeshKa]

Hi @Johann_Lu ,

1. Check Configuration: Ensure that you have configured the authentication requirements correctly. Double-check the path - prefix in -/libs/wcm/core/content/reference and ensure that it matches the path you want to allow anonymous access to.

2. Permissions: Make sure that the permissions are set correctly for the path you're trying to access. Even if authentication requirements are configured, if the permissions are not set to allow anonymous access, users will still be prompted to log in.

3. Cache: Sometimes, changes to authentication requirements may not take effect immediately due to caching. Try clearing any caches in your Apache Sling instance and restarting it to see if the changes are reflected.

4. Debugging: Enable debugging/logging for the authentication service to see if there are any errors or unexpected behavior occurring. This can help pinpoint the issue more accurately.

5. Documentation: Refer to the official Apache Sling documentation for authentication and authorization to ensure you're following best practices and using the correct configuration options.

6. Community Support: If you're still unable to resolve the issue, consider reaching out to the Apache Sling community for assistance. They may be able to provide additional insights or help troubleshoot the problem further.

By following these steps and possibly seeking assistance from the community, you should be able to identify and resolve the issue with Apache Sling's authentication service.

[kautuk_sahni]

@Johann_Lu Did you find the suggestions from users helpful? Please let us know if more information is required. Otherwise, please mark the answer as correct for posterity. If you have found out solution yourself, please share it with the community.