Details
-
Bug
-
Status: Open
-
Major
-
Resolution: Unresolved
-
Form Based Authentication 1.0.12, Starter 11
-
None
-
None
-
Windows 10 Pro 64bit
Java 1.8.0_92
Chrome 72.0.3626.121, Firefox 65.0.2
Description
Session Attribute Hash Storage does not work in Form Based Authentication Handler. Using this configuration option breaks the possibility to log into a Sling instance properly.
The attached video shows the issue steps:
- Login to a Sling instance (at e.g. localhost:8080)
- Open Apache Sling Form Based Authentication Handler configuration
- Set Hash Storage option to Session Attribute
- Refresh /system/console
As the result one can no longer properly login.