Hi,
I've been able to integrate with all the latest Java changes, things
are looking well.
I did just notice that a security token is now required for all REST
operations. If I modify my implementation of SecurityTokenDecoder I
can construct an 'anonymous' token and return that when a token is not
presented (this would use a magic userid deemed 'anonymous')... Or we
could catch the exception and continue processing in contexts where
anonymous retrieval makes sense....
If we do go down the anonymous token route it might be wise to add a
isAnonymous() method so Data Handlers can quickly check for this
condition in an implementation independent manner..
Paul Lindner
[EMAIL PROTECTED]
