rnewson/couchdb-lucene — pull request #150 by jalpedersen (2012-02-19 01:36:02+00:00)
Title: Pass-through authentication

I know that you have previously mentioned that you would prefer to implement this sort of thing using a UserRealm, but then one would have to maintain a session in Jetty just for the sake of CouchDB.

One great benefit of going the pass-through way is that it makes it much easier to implement secure search when dealing with multiple separate CouchApps (as I pass both the CouchDB auth-session cookie as well as the authentication header if present).
Yet another benefit is that one does not have to have to store a couchdb user's username and password in clear-text in couchdb-lucene.ini.

Note that this commit will not break the current behaviour. If credentials are specified in couchdb-lucene.ini, these will still be used, so any user can access what the credentials give access to.