Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Duplicate
-
Auth Core 1.0.6
-
None
-
CQ 5.4
Description
SlingAuthenticator has a registered listener on services that share sling.auth.requirements service attributes.
These paths serve as basis to PathBasedHolders that decide what request paths need to be authenticated.
When the listener is called from multiple threads on the same service SlingAuthenticator PathBasedHolders cache gets corrupted due to insufficient synchronization. The effect is artificial multiplication of records.
This patch adds synchronized block within the listener.
Attachments
Attachments
Issue Links
- duplicates
-
SLING-2966 Insufficient synchronization in SlingAuthenticator
- Closed