mmodzelewski commented on PR #3745: URL: https://github.com/apache/iggy/pull/3745#issuecomment-5179017235
@slbotbm Thanks for the review - the race you describe is real. I would merge it as is, as the scenario itself falls outside the client's contract: a TCP client wraps a single connection, and the server keeps one session per connection, so the client is inherently single-user. Even with the complete login-and-redirection operation serialized, the second login would still replace the connection's identity, and user A's caller would silently end up on a connection authenticated as user B. Multiple users need separate client instances. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
