Thomas Sigdestad

Sounds like a smart plan.

We probably need to support it in lib-auth I guess, so any IDprovier may choose to support that?

My suggestion is that idprovider could be configured in "active" mode, vs "passive" mode on a per vhost config. The basic idea is that active mode will trigger 401 on...

Maybe call this "force authentication" instead?

This functionality appears to be available in the Java layer, as it is already possible to upload new binaries to existing media, and metadata is automatically updated.

Aren't you describing the "alive app" here?

Yes, but still in use by many. This should be a very simple "if null" check that we seem to be missing now.

Naturally it will fail, but the problem here is that you should not need the "portal" lib at all... Solution here is probalby to split portal into two different API's...

Interesting idea. Do you need this in order to sort on "last updated" or something like that? What are the use-cases?

I understand that they want to sort, but what is the "rule" they want to sort by?