in src/main/java/org/apache/sling/auth/core/impl/AuthenticationRequirementsManager.java [334:361]
private Set<String> buildPathsSet(final ResourceMapper mapper, final String[] authReqPaths) {
final Set<String> paths = new HashSet<>();
for(String authReq : authReqPaths) {
if (authReq != null ) {
authReq = authReq.trim();
if ( authReq.length() > 0 ) {
final String prefix;
if ( authReq.startsWith("+") ) {
prefix = null;
authReq = authReq.substring(1);
} else if ( authReq.startsWith("-") ) {
prefix = "-";
authReq = authReq.substring(1);
} else {
prefix = null;
}
paths.add(prefix == null ? authReq : prefix.concat(authReq));
if ( mapper != null ) {
for(final String mappedPath : mapper.getAllMappings(authReq)) {
paths.add(prefix == null ? mappedPath : prefix.concat(mappedPath));
}
}
}
}
}
return paths;
}