actframework / act-aaa-plugin

Use OSGL aaa library to mange Authentication/Authorization/Accounting for ActFramework Application
Apache License 2.0
6 stars 2 forks source link

Adding `-act.apidoc` to `aaa.authenticate.list` file does not stop authentication requirement of ApiDoc services #17

Closed greenlaw110 closed 6 years ago

greenlaw110 commented 6 years ago

To make it possible for act-aaa waive the authentication checking for a certain service endpoing, aaa.authentication.list is created to add the name list. For now we have the following entries in the list:

# By default waive authentication check on `act.Zen.` and `act.i18n.`
-act.i18n.
-act.Zen.

Meaning act-aaa will skip credential checking for all services provided by all classes in act.i18n package and the act.Zen class.

However adding -act.apidoc into the list has not effect, this is because apidoc request handler is not a normal method based, instead it directly extends RequestHandlerBase class, which makes the difference.

This request is to get act-aaa to check aaa.authentication.list for the request handler that not extended from RequestHandlerProxy.