Redirect to login page when accessing a react page without being logged in

[Pauleing]

Could be related to #491 , check with @marcanpilami

[marcanpilami]

Unassigning myself, as backend part is done. Backend behavious is now like this:

• When a query arrives with a certificate, certificate is used for auth.
• Otherwise, if no session is already open, challenge the query with a normal basic auth only if not coming from an XmlHttpRequest (determined with X-Requested-With header)
• Otherwise challenge with a basic authentication with the BASICXHR auth schema, which is not supported by browsers and therefore will not create any prompt.

Therefore, the react app must simply catch 401 answers and deal with them accordingly (ask for auth again).

[Pauleing]

@marcanpilami I'm reassigning you since the basic auth prompt is still shown when trying to access a page while being logged out. It works fine when accessing "/" though, thanks.

[marcanpilami]

Added to the policy: all non-ws URL (existing or not) are protected by form authentication . So deep links should now trigger authentication form.

Still annoying: cannot find a way to redirect to requested URL after auth form... should be the default with Shiro, but it always redirects to root.

[Pauleing]

@marcanpilami I added the code to catch 401 in API calls and redirect to the auth page, but sadly Shiro blocks the request first and shows the basic auth login. Can you check this part as well?