Page History

...

Step-by-Step Configuration

1. If you previously configured authorization for your repository, open your Open your Spring configuration file.
   1. Remove any beans that are instances of org.fcrepo.auth.common.ShiroAuthenticationProvider.
   2. Remove the the depends-on attribute on from the modeshapeRepofactory bean, if there is one.
2. Open your web.xml file.
   1. Remove all occurences of "shiroFilter" (<filter> and <filter-mapping>)
   2. Comment out <security-constraint> and <login-config> sections
3. Open your Modeshape repository configuration file (repository.json).
   1. Under security, configure the BypassSecurityServletAuthenticationProvider, as shown in the example below.

"security" : {
  "anonymous" : {
    "roles" : ["readonly","readwrite","admin"],
    "useOnFailedLogin" : false
  },
  "providers" : [
    { "classname" : "org.fcrepo.auth.commonscommon.BypassSecurityServletAuthenticationProvider" }
  ]
},

...