Disable request for basic auth
authorMathieu Baudier <mbaudier@argeo.org>
Sat, 7 Nov 2015 12:28:56 +0000 (12:28 +0000)
committerMathieu Baudier <mbaudier@argeo.org>
Sat, 7 Nov 2015 12:28:56 +0000 (12:28 +0000)
git-svn-id: https://svn.argeo.org/commons/trunk@8557 4cfe0d0a-d680-48aa-b62c-e0a02a3f76cc

org.argeo.cms/src/org/argeo/cms/internal/kernel/DataHttp.java

index 0b697ba77c6cb0835432e1ac8f074e7a146c1d4e..123455e7dcd514216e27b2621afd0917236ebbeb 100644 (file)
@@ -52,12 +52,12 @@ class DataHttp implements KernelConstants, ArgeoJcrConstants {
 
        // private final static String ATTR_AUTH = "auth";
        private final static String HEADER_AUTHORIZATION = "Authorization";
-       private final static String HEADER_WWW_AUTHENTICATE = "WWW-Authenticate";
+       // private final static String HEADER_WWW_AUTHENTICATE = "WWW-Authenticate";
 
        private final HttpService httpService;
 
        // FIXME Make it more unique
-       private String httpAuthRealm = "Argeo";
+       // private String httpAuthRealm = "Argeo";
 
        // WebDav / JCR remoting
        private OpenInViewSessionProvider sessionProvider;
@@ -177,7 +177,7 @@ class DataHttp implements KernelConstants, ArgeoJcrConstants {
                                                throw new CmsException("Could not login", e1);
                                        }
                                } else {
-                                       requestBasicAuth(request, response);
+                                       // requestBasicAuth(request, response);
                                        return false;
                                }
                        } catch (LoginException e) {
@@ -195,13 +195,13 @@ class DataHttp implements KernelConstants, ArgeoJcrConstants {
                        return null;
                }
 
-               private void requestBasicAuth(HttpServletRequest request,
-                               HttpServletResponse response) {
-                       response.setStatus(401);
-                       response.setHeader(HEADER_WWW_AUTHENTICATE, "basic realm=\""
-                                       + httpAuthRealm + "\"");
-                       // request.getSession().setAttribute(ATTR_AUTH, Boolean.TRUE);
-               }
+               // private void requestBasicAuth(HttpServletRequest request,
+               // HttpServletResponse response) {
+               // response.setStatus(401);
+               // response.setHeader(HEADER_WWW_AUTHENTICATE, "basic realm=\""
+               // + httpAuthRealm + "\"");
+               // // request.getSession().setAttribute(ATTR_AUTH, Boolean.TRUE);
+               // }
 
                private CallbackHandler basicAuth(final HttpServletRequest httpRequest) {
                        String authHeader = httpRequest.getHeader(HEADER_AUTHORIZATION);