RequiresAuthenticationFilter: Doc/Impl wrong; empty clientName about spark-pac4j HOT 3 CLOSED

Using the RequiresAuthenticationFilter means that you want to secure an url. The way the authentication is processed or started depends on the clientName parameter which is a list of client names separated by commas (or maybe just one) or an empty string. In this latest case, the url is just protected.

This must not be confused with tthe client_name parameter which is a request parameter and which allows you to select the client you want to use for authentication.

Let's have some examples:

before("/protected", new RequiresAuthenticationFilter(config, ""));: the /protected url is protected and you must be authenticated to access to it, if you are not authenticated, a 401 error is returned

before("/protected", new RequiresAuthenticationFilter(config, "CasClient"));: the /protected url is protected and you must be authenticated to access to it, if you are not authenticated, a login process with a CAS server is started

before("/protected", new RequiresAuthenticationFilter(config, "CasClient,FacebookClient"));: the /protected url is protected and you must be authenticated to access to it, if you are not authenticated, a login process with a CAS server is started. If you call /protected?client_name=FacebookClient and are not authenticated, a Facebook login is started.

Does it make things clearer? Can you point me out the part of the documentation which you find misleading?

from spark-pac4j.

Oki, that makes it clear, sorry, I was confused

from spark-pac4j.

Not problem at all. Always feel free to submit pull requests to improve documentation.

from spark-pac4j.