in src/main/java/org/apache/sling/auth/core/impl/AuthenticationRequirementsManager.java [152:174]
private void modified(final SlingAuthenticator.Config config) {
this.clear();
this.addHolder(new AuthenticationRequirementHolder("/", !config.auth_annonymous(), null));
if (config.sling_auth_requirements() != null) {
for (String authReq : config.sling_auth_requirements()) {
if (authReq != null && authReq.length() > 0) {
this.addHolder(AuthenticationRequirementHolder.fromConfig(
authReq, null));
} else {
logger.warn("Ignoring null/empty config for auth requirements");
}
}
}
// don't require authentication for login/logout servlets
this.addHolder(new AuthenticationRequirementHolder(
LoginServlet.SERVLET_PATH, false, null));
this.addHolder(new AuthenticationRequirementHolder(
LogoutServlet.SERVLET_PATH, false, null));
// add all registered services
this.registerAllServices();
}