Dear Apache Sling Team,

The Apache Sling OAuth 2.0 client provides an
`org.apache.sling.auth.core.spi.AuthenticationHandler` for OIDC support
(`org.apache.sling.auth.oauth_client.impl.OidcAuthenticationHandler`),
which is intended to enable full Apache Sling authentication (
https://github.com/apache/sling-org-apache-sling-auth-oauth-client/blob/c467b0ed44c48b46a9844970d25b6fb3012649e3/src/main/java/org/apache/sling/auth/oauth_client/impl/OidcAuthenticationHandler.java
).

My understanding is that this type of authentication also requires a
corresponding implementation of `javax.security.auth.spi.LoginModule`,
which I have not been able to find in the current implementation. Is my
understanding correct? If so, are there any plans to provide a
`LoginModule` for this purpose? If not, could you please direct me to
documentation or an example demonstrating how to configure the
`OidcAuthenticationHandler` for a complete authentication setup?

Thank you for your guidance.

Kind regards,

Herman Ciechanowiec
her...@ciechanowiec.eu

Reply via email to