I am using AEM 5.6.1 and the requirement is that end user must be Authenticated to view few DAM assets in publish instance using an dispacther.Could you please suggest what is best mechanism i could use and any best practices in general i must look for.
If you have multiple PDFs/assets which require authentication then why not create an assets listing page which can be shown to authenticated users. You can set CUG (Closed user group) properties on the listing page so that only required group of users will have access to it via login.
If you do not like applying these properties individually on multiple assets then other solution could be to create a custom servlet and bind it to a resource type and bind that resource type to a page. Then you can restrict access to that page by setting CUG properties on it. You can then expose the page url with asset path as parameter in the front end to the users. When they hit the page URL the AEM will check if the user is authenticated or not. If not then it will redirect to the login page and if yes then it will call the servlet and pass the asset path as param to it. The servlet then can redirect to the asset URL(passed as param to it).
The anonymous users when hits on the PDF link to download on publish instance.He will be shown up with login page.Then followed by Authentication mechanism.That is he logs in and then we need a session present for sometime for the login.Then logout for the user
If you have multiple PDFs/assets which require authentication then why not create an assets listing page which can be shown to authenticated users. You can set CUG (Closed user group) properties on the listing page so that only required group of users will have access to it via login.
If you do not like applying these properties individually on multiple assets then other solution could be to create a custom servlet and bind it to a resource type and bind that resource type to a page. Then you can restrict access to that page by setting CUG properties on it. You can then expose the page url with asset path as parameter in the front end to the users. When they hit the page URL the AEM will check if the user is authenticated or not. If not then it will redirect to the login page and if yes then it will call the servlet and pass the asset path as param to it. The servlet then can redirect to the asset URL(passed as param to it).
