Headers Authenticator for XWiki

Last modified by Admin on 2022/02/28 00:33

cogXWiki authentication based on HTTP headers
Developed by

Denis Gervalle, Thomas Mortagne, Ludovic Dubost

Active Installs6
0 Votes
LicenseGNU Lesser General Public License 2.1

Installation of authenticators using Extension Manager is only supported since XWiki 6.0M1

Installable with the Extension Manager


XWiki authentication based on HTTP headers

This authenticator is now superseded by a newer more versatile version available as an adapter for the new trusted authentication framework. From many minor ones, an important limitation of this authenticator compared to the new one, is that user fields are never synchronised for existing users

See https://github.com/xwiki-contrib/xwiki-authenticator-headers/blob/master/README.md

Prerequisites & Installation Instructions

We recommend using the Extension Manager to install this extension (Make sure that the text "Installable with the Extension Manager" is displayed at the top right location on this page to know if this extension can be installed with the Extension Manager).

You can also use the manual method which involves dropping the JAR file and all its dependencies into the WEB-INF/lib folder and restarting XWiki.

Release Notes


This is almost the exact same release as the previous one, but it lowered the requirement for XWiki code to XWiki 4.4.1 or later.
(Since the unit testing mocker is only available since 6.2, the testing part of the refactoring has been put aside in a branch, and will be applied during an upgrade to 6.4 or later.)


This is almost the exact same release as the previous one, but it correctly enforce the requirement on XWiki core to 6.2 or later.


This is almost the exact same release as the previous one, but it is now exposed with a better extension  ID.


This is a complete refactoring of the original extension published in the contrib sandbox. Code is now fully unit tested thanks to the recent MockitoOldcoreRule mocking.

TODO: User synchronization of existing users. Currently, user fields are only applied at creation time.


Dependencies for this extension (org.xwiki.contrib.authentication:xwiki-authenticator-headers 2.0.3):

  • org.xwiki.platform:xwiki-platform-oldcore 4.4.1

Get Connected