Dominik Smogór created SLING-2701:
-------------------------------------
Summary: SlingAuthenticator is volatile to multithreaded auth path
updates.
Key: SLING-2701
URL: https://issues.apache.org/jira/browse/SLING-2701
Project: Sling
Issue Type: Bug
Components: Authentication
Affects Versions: Auth Core 1.0.6
Environment: CQ 5.4
Reporter: Dominik Smogór
SlingAuthenticator has a registered listener on services that share
sling.auth.requirements service attributes.
These paths serve as basis to PathBasedHolders that decide what request paths
need to be authenticated.
When the listener is called from multiple threads on the same service
SlingAuthenticator PathBasedHolders cache gets corrupted due to insufficient
synchronization. The effect is artificial multiplication of records.
This patch adds synchronized block within the listener.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira