Uploaded image for project: 'Jackrabbit Oak'
  1. Jackrabbit Oak
  2. OAK-8404

AbstractLoginModule#logout() may fail for impersonated users whose subject provides admin credentials

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Not A Bug
    • None
    • None
    • security-spi
    • None

    Description

      More precisely, this will happen when the subject doesn't provide public credentials.

      Attachments

        1. oak-8404.patch
          3 kB
          Manfred Baedke

        Issue Links

          is superceded by

          Bug - A problem which impairs or prevents the functions of the product. OAK-8710 AbstractLoginModule#logout() must not remove 'foreign' principals/credentials

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Activity

            People

              baedke Manfred Baedke
              baedke Manfred Baedke
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: