[
https://issues.apache.org/jira/browse/SLING-2701?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Dominik Smogór updated SLING-2701:
----------------------------------
Attachment: authcore-SLING-2701.patch
A patch adding necessary synchrinizations.
> SlingAuthenticator is volatile to multithreaded auth path updates.
> ------------------------------------------------------------------
>
> Key: SLING-2701
> URL: https://issues.apache.org/jira/browse/SLING-2701
> Project: Sling
> Issue Type: Bug
> Components: Authentication
> Affects Versions: Auth Core 1.0.6
> Environment: CQ 5.4
> Reporter: Dominik Smogór
> Attachments: authcore-SLING-2701.patch
>
>
> SlingAuthenticator has a registered listener on services that share
> sling.auth.requirements service attributes.
> These paths serve as basis to PathBasedHolders that decide what request paths
> need to be authenticated.
> When the listener is called from multiple threads on the same service
> SlingAuthenticator PathBasedHolders cache gets corrupted due to insufficient
> synchronization. The effect is artificial multiplication of records.
> This patch adds synchronized block within the listener.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
