[GEODE-9453] The server, once a user expires, should clean the user attributes from the server.

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.15.0
• Component/s: core, security
• Labels: GeodeOperationAPI pull-request-available
• Assignee: Jinmei Liao
• Reporter: Jinmei Liao
• Created: 23/Jul/21 18:48
• Updated: 22/Jun/22 20:46
• Resolved: 20/Sep/21 19:18

Description

ClientUserAuths maintains a map of clientID to its user attributes (the logged in shiro subject etc), when user expires, we need to remove that entry from that map and log the shiro subject out to avoid resource leak.

 

add all appropriate tests (unit, integration and dunit)

The test should cover multi-server scenario, and make sure the expired subject entry is cleared in the map.

Issue Links

• links to: GitHub Pull Request #6804