XQuery/URL Driven Authorization

Motivation

You want to check to see if a user is logged in before a page is rendered.

Method

This example will use a custom controller.xql file to do this.

Sample controller.xql file:

(:  Protected resource: user is required to log in with valid credentials.
   If the login fails or no credentials were provided, the request is
redirected
   to the login.xml page. :)
else if ($exist:resource eq 'protected.xml') then
   let $login := local:set-user()
   return
       if ($login) then
           <dispatch xmlns="http://exist.sourceforge.net/NS/exist">
               {$login}
               <view>
                   <forward url="style.xql"/>
               </view>
           </dispatch>
       else
           <dispatch xmlns="http://exist.sourceforge.net/NS/exist">
               <forward url="login.xml"/>
               <view>
                 <forward url="style.xql"/>
               </view>
           </dispatch>

else
   (: everything else is passed through :)
   <dispatch xmlns="http://exist.sourceforge.net/NS/exist">
       <cache-control cache="yes"/>
   </dispatch>