Uploaded image for project: 'Jackrabbit Oak'
  1. Jackrabbit Oak
  2. OAK-8870

UserAuthentication.authenticate should remove pw attribute

Attach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 1.2, 1.4, 1.6.0, 1.8.0, 1.10.0, 1.12.0, 1.14.0, 1.16.0, 1.18.0, 1.20.0, 1.22.0
    • Fix Version/s: 1.24.0, 1.10.8, 1.6.20, 1.4.26, 1.8.20, 1.22.1
    • Component/s: core, security
    • Labels:
      None

      Description

      I noticed that UserAuthentication.authenticate(Credentials) does not remove the optional CREDENTIALS_ATTRIBUTE_NEWPASSWORD upon completion of the authentication step.

        Attachments

          Activity

            People

            • Assignee:
              angela Angela Schreiber
              Reporter:
              angela Angela Schreiber

              Dates

              • Created:
                Updated:
                Resolved:

                Issue deployment