in src/main/java/com/googlesource/gerrit/plugins/gitblit/auth/GerritAuthFilter.java [72:88]
public boolean doFilter(
DynamicItem<WebSession> webSession,
ServletRequest request,
ServletResponse response,
FilterChain chain)
throws IOException, ServletException {
HttpServletRequest httpRequest = (HttpServletRequest) request;
String hdr = httpRequest.getHeader("Authorization");
if (hdr != null) {
return filterBasicAuth((HttpServletRequest) request, (HttpServletResponse) response, hdr);
} else if (webSession.get().isSignedIn()) {
return filterSessionAuth(webSession, (HttpServletRequest) request);
} else {
return true;
}
}