in src/main/java/org/apache/sling/auth/core/impl/AuthenticationRequirementsManager.java [336:363]
private Set<String> buildPathsSet(final ResourceMapper mapper, final String[] authReqPaths) {
final Set<String> paths = new HashSet<>();
for (String authReq : authReqPaths) {
if (authReq != null) {
authReq = authReq.trim();
if (authReq.length() > 0) {
final String prefix;
if (authReq.startsWith("+")) {
prefix = null;
authReq = authReq.substring(1);
} else if (authReq.startsWith("-")) {
prefix = "-";
authReq = authReq.substring(1);
} else {
prefix = null;
}
paths.add(prefix == null ? authReq : prefix.concat(authReq));
if (mapper != null) {
for (final String mappedPath : mapper.getAllMappings(authReq)) {
paths.add(prefix == null ? mappedPath : prefix.concat(mappedPath));
}
}
}
}
}
return paths;
}