dotCMS / core

Headless/Hybrid Content Management System for Enterprises
http://dotcms.com
Other
845 stars 465 forks source link

Unable to authenticate a servlet request #29869

Open weiyiwang-dotcms opened 1 week ago

weiyiwang-dotcms commented 1 week ago

Parent Issue

No response

User Story

As a user, I want to be able to download a file from dotCMS through an API with authentication, so I can programmatically retrieve files from dotCMS.

Acceptance Criteria

Allow for requests to the servlet to accept authentication information, so that users can have their resources protected behind authentication, but still access them via an authenticated API request

Proposed Objective

Technical User Experience

Proposed Priority

Priority 2 - Important

External Links... Slack Conversations, Support Tickets, Figma Designs, etc.

https://dotcms.slack.com/archives/C01N0AU1NUC/p1725401158867469 https://dotcms.freshdesk.com/a/tickets/27408

Assumptions & Initiation Needs

No response

Quality Assurance Notes & Workarounds

No response

Sub-Tasks & Estimates

No response

weiyiwang-dotcms commented 1 week ago

One additional detail:

the servlet that serves the file only checks the user like this final User user = PortalUtil.getUser(req);

no authentication is performed, but just gets the user from the session.