368773 allow authentication to be set by non securityHandler handlers

This commit is contained in:
Greg Wilkins 2012-01-27 08:39:11 +11:00
parent 7ac9eb585f
commit ce2dd8e30e
1 changed files with 5 additions and 3 deletions

View File

@ -306,7 +306,7 @@ public abstract class SecurityHandler extends HandlerWrapper implements Authenti
if (_identityService==null)
_identityService=findIdentityService();
if (_identityService==null && _loginService!=null)
if (_identityService==null && _realmName!=null)
_identityService=new DefaultIdentityService();
}
@ -469,7 +469,8 @@ public abstract class SecurityHandler extends HandlerWrapper implements Authenti
{
Authentication.User userAuth = (Authentication.User)authentication;
baseRequest.setAuthentication(authentication);
previousIdentity = _identityService.associate(userAuth.getUserIdentity());
if (_identityService!=null)
previousIdentity = _identityService.associate(userAuth.getUserIdentity());
if (isAuthMandatory)
{
@ -483,7 +484,8 @@ public abstract class SecurityHandler extends HandlerWrapper implements Authenti
}
handler.handle(pathInContext, baseRequest, request, response);
authenticator.secureResponse(request, response, isAuthMandatory, userAuth);
if (authenticator!=null)
authenticator.secureResponse(request, response, isAuthMandatory, userAuth);
}
else if (authentication instanceof Authentication.Deferred)
{