Re: Perl Authorization handler called before authentication handler

Lathan Bidwell wrote:
> I have looked all around apache's documentation on how to upgrade from 2.2
> to 2.4, but they don't include much about using PerlAddAuthzProvider or
> PerlAuthenHandler.
> 
> I have this config section:
> 
> PerlAddAuthzProvider membersuser Application::User::Members->authorize24
> 
> <DirectoryMatch ^.*/members/>
>         DirectoryIndex disabled
>         PerlAuthenHandler       Application::User::Members->authenticate24
>         #PerlAuthenHandler      Application::User::Members::authenticate24
> 
>         AuthType        Application::User::Members
>         AuthName        "Members"
> 
>         Require membersuser testing123
> </DirectoryMatch>
> 
> 
> But for some reason, my authorize24 subroutine is being called before my
> authenticate24 subroutine.
> 
> I have simplified those 2 subroutines down to printing debugging info to
> the error log, (the authen sub sets $r->user('testing')), but I cannot
> figure out why the handlers are called in the wrong order.
> 

Not a solution, just a couple of questions, to make sure that we are seeing the issue 
correctly :

1) /is/ the authenticate24 subroutine ever called ? Can you see that ?
2) what is the exact request URL used, when you encounter this issue ?

And then a tentative suggestion :

<DirectoryMatch ^.*/members/>
can be probably be replaced with the equivalent
<DirectoryMatch /members/>
which should be a little bit more efficient.