...
- Enable this provider by setting the configuration property
fcrepo.auth.principal.roles.enabled
totrue
. - Set the
fcrepo.auth.principal.roles.list
to a comma separated list of roles - Update your web.xml
auth-constraint
element to contain your custom roles
...
HttpHeaderPrincipalProvider is a Principal Provider that obtains its initial set of principals from HTTP header requests.
- Enable this provider by setting the configuration property
fcrepo.auth.principal.header.enabled
totrue
. - Set
fcrepo.auth.principal.header.name
to the name of the header that contains the principals - Set
fcrepo.auth.principal.header.separator
to the character that is used to separate multiple principals in the header
For example, your fcrepo.properties file might look like this:
Code Block | |||||
---|---|---|---|---|---|
| |||||
fcrepo.auth.principal.header.enabled=true fcrepo.auth.principal.header.name=x-principal-header fcrepo.auth.principal.header.separator=,<!-- Optional PrincipalProvider that will inspect the request header, "some-header", for user role values --> <bean name="headerProvider" class="org.fcrepo.auth.common.HttpHeaderPrincipalProvider"> <property name="headerName" value="some-header"/> <property name="separator" value=","/> </bean> |
Delegate Header Principal Provider
...