Minor enhancement to WikiSession now allows full use of non-JSPWiki supplied JAAS LoginModules in the JSPWiki-custom configuration. Previously, we considered a user to be authenticated only if a LoginModule had added Role.AUTHENTICATED to the Subject's principal set. This is clearly unreasonable for LoginModules that have no knowledge of JSPWiki, such as Sun's supplied modules or third-party modules used for LDAP  authentication. Now, we consider a user authenticated if they are not anonymous and not asserted, and we lazily add Role.AUTHENTICATED in these cases, after login.
Minor enhancement to WikiSession now allows full use of non-JSPWiki supplied JAAS LoginModules in the JSPWiki-custom configuration. Previously, we considered a user to be authenticated only if a LoginModule had added Role.AUTHENTICATED to the Subject's principal set. This is clearly unreasonable for LoginModules that have no knowledge of JSPWiki, such as Sun's supplied modules or third-party modules used for LDAP  authentication. Now, we consider a user authenticated if they are not anonymous and not asserted, and we lazily add Role.AUTHENTICATED in these cases, after login.


git-svn-id: 6c0206e3b9edd104850923da33ebd73b435d374d@626115 13f79535-47bb-0310-9956-ffa450edef68

tateshitah/jspwiki,tateshitah/jspwiki,tateshitah/jspwiki,tateshitah/jspwiki