Uploaded image for project: 'Sling'
  1. Sling
  2. SLING-2701

SlingAuthenticator is volatile to multithreaded auth path updates.

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Duplicate
    • Affects Version/s: Auth Core 1.0.6
    • Fix Version/s: Auth Core 1.1.4
    • Component/s: Authentication
    • Labels:
      None
    • Environment:
      CQ 5.4

      Description

      SlingAuthenticator has a registered listener on services that share sling.auth.requirements service attributes.
      These paths serve as basis to PathBasedHolders that decide what request paths need to be authenticated.
      When the listener is called from multiple threads on the same service SlingAuthenticator PathBasedHolders cache gets corrupted due to insufficient synchronization. The effect is artificial multiplication of records.
      This patch adds synchronized block within the listener.

        Attachments

        1. authcore-SLING-2701.patch
          3 kB
          Dominik Smogór

          Issue Links

            Activity

              People

              • Assignee:
                cziegeler Carsten Ziegeler
                Reporter:
                dsmogor Dominik Smogór
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: