Dominik Smogór created SLING-2701: ------------------------------------- Summary: SlingAuthenticator is volatile to multithreaded auth path updates. Key: SLING-2701 URL: https://issues.apache.org/jira/browse/SLING-2701 Project: Sling Issue Type: Bug Components: Authentication Affects Versions: Auth Core 1.0.6 Environment: CQ 5.4 Reporter: Dominik Smogór
SlingAuthenticator has a registered listener on services that share sling.auth.requirements service attributes. These paths serve as basis to PathBasedHolders that decide what request paths need to be authenticated. When the listener is called from multiple threads on the same service SlingAuthenticator PathBasedHolders cache gets corrupted due to insufficient synchronization. The effect is artificial multiplication of records. This patch adds synchronized block within the listener. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira