Uploaded image for project: 'Sling'
  1. Sling
  2. SLING-2701

SlingAuthenticator is volatile to multithreaded auth path updates.

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Duplicate
    • Auth Core 1.0.6
    • Auth Core 1.1.4
    • Authentication
    • None
    • CQ 5.4

    Description

      SlingAuthenticator has a registered listener on services that share sling.auth.requirements service attributes.
      These paths serve as basis to PathBasedHolders that decide what request paths need to be authenticated.
      When the listener is called from multiple threads on the same service SlingAuthenticator PathBasedHolders cache gets corrupted due to insufficient synchronization. The effect is artificial multiplication of records.
      This patch adds synchronized block within the listener.

      Attachments

        1. authcore-SLING-2701.patch
          3 kB
          Dominik Smogór

        Issue Links

          duplicates

          Bug - A problem which impairs or prevents the functions of the product. SLING-2966 Insufficient synchronization in SlingAuthenticator

          • Major - Major loss of function.
          • Closed

          Activity

            People

              cziegeler Carsten Ziegeler
              dsmogor Dominik Smogór
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: