Uploaded image for project: 'Jackrabbit Oak'
  1. Jackrabbit Oak
  2. OAK-6940

Login token name generation is prone to race conditions

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Trivial
    • Resolution: Fixed
    • None
    • 1.7.12, 1.8.0
    • core, security
    • None

    Description

      Under high concurrency the TokenProviderImpl#generateTokenName method can return the same value, causing the commit to fail and be retried with a generic UUID value.
      This seems pretty expensive (benchmarks to follow) and it would probably be best to try using a random value every time, sacrificing the 'human readable' property of the node name.

      fyi anchela

      Attachments

        Activity

          People

            stillalex Alex Deparvu
            stillalex Alex Deparvu
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: