Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-21635

Force authentication when the download fails in an anonymous session

    XMLWordPrintable

    Details

      Description

      If the anonymous user is enabled and one follows a link to download a file without being authenticated, the download will fail and redirect to the error page with a "No document found" message.

      This corresponds to the behavior written in DownloadServiceImpl#handleDownload

                  DocumentModel doc = getDownloadDocument(downloadBlobInfo.repository, downloadBlobInfo.docId);
                  if (doc == null) {
                      resp.sendError(HttpServletResponse.SC_NOT_FOUND, "No document found");
                      return;
                  }
      

      We need to find a mechanism to force the authentication.

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 3 days
                3d