Disabling authentication for certain actions.

[robertpustulka]

I'm wondering how can I make some controllers/actions public?

Currently after adding AuthenticationMiddleware all requests have to be authenticated. The only exception is for login url in FormAuthenticator. But there are some use cases like home page etc, where authentication is not necessary.

I know this plugin intends to decouple authorization from authentication but my use case takes place before authorization is even possible. I want to have actions not authenticated at all.

In AuthComponent we had allow() and deny() to control when authentication should take place. Now this feature is missing.

[robertpustulka]

Me too stupid for this :)

For the future reference:
I thought that response fails if the authentication fails. But it doesn't. There's failed authentication result in $request->getAttribute('authenticationResult') and nothing more.

Sorry for this unecessary issue.