Dominik Smogór created SLING-2701:
-------------------------------------

             Summary: SlingAuthenticator is volatile to multithreaded auth path 
updates.
                 Key: SLING-2701
                 URL: https://issues.apache.org/jira/browse/SLING-2701
             Project: Sling
          Issue Type: Bug
          Components: Authentication
    Affects Versions: Auth Core 1.0.6
         Environment: CQ 5.4
            Reporter: Dominik Smogór


SlingAuthenticator has a registered listener on services that share 
sling.auth.requirements service attributes.
These paths serve as basis to PathBasedHolders that decide what request paths 
need to be authenticated.
When the listener is called from multiple threads on the same service 
SlingAuthenticator PathBasedHolders cache gets corrupted due to insufficient 
synchronization. The effect is artificial multiplication of records.
This patch adds synchronized block within the listener.



--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to