in src/main/java/org/apache/sling/auth/form/impl/FormAuthenticationHandler.java [744:760]
public String extractAuthenticationInfo(HttpServletRequest request) {
Cookie[] cookies = request.getCookies();
if (cookies != null) {
for (Cookie cookie : cookies) {
if (this.cookieName.equals(cookie.getName())) {
// found the cookie, so try to extract the credentials
// from it and reverse the base64 encoding
String value = cookie.getValue();
if (value.length() > 0) {
return new String(Base64.decodeBase64(value), StandardCharsets.UTF_8);
}
}
}
}
return null;
}