<?xml version="1.0"?>
<component name="org.nuxeo.ecm.login.token.authentication.contrib.override">

  <require>org.nuxeo.ecm.login.token.authentication.contrib</require>

  <extension point="authenticators" target="org.nuxeo.ecm.platform.ui.web.auth.service.PluggableAuthenticationService">

    <documentation>
      Authentication plugin using a token to validate
      identity. This token is sent as a HTTP request header.

      The user is
      retrieved looking into a directory mapping unique tokens to user
      names.

      This Authentication Plugin is configured to be
      used with the
      Trusting_LM LoginModule plugin
      =&gt; no password check will
      be done, a
      principal will be created
      from the userName if the user exists in
      the
      user directory.

      @author
      Antoine Taillefer (ataillefer@nuxeo.com)
    </documentation>

    <authenticationPlugin class="org.nuxeo.ecm.platform.ui.web.auth.token.TokenAuthenticator" enabled="true" name="TOKEN_AUTH">
      <loginModulePlugin>Trusting_LM</loginModulePlugin>
    </authenticationPlugin>

  </extension>

</component>
