Sling Authentication Servlet – Secret powers for access

The sling authentication service (org.apache.sling.engine.impl.auth.SlingAuthenticator) controls a bunch of different functions but the most critical is that it determines what an anonymous user can access.  Why do you care? A number of the different default behaviors between author and publish mode servers come from changes to the default configuration to this service.  In Author mode, anonymous […]

Programmatically updating OSGI service configurations

Nate Yolles has a great post about the inner workings of how you can programmatically update OSGI services in AEM: http://www.nateyolles.com/blog/2015/10/updating-osgi-configurations-in-aem-and-sling   As a general rule, I prefer configurations to be static, so they can be tracked in a version control system and targeted at sling runmodes, but there may be circumstances where updating configs […]