[
https://issues.apache.org/jira/browse/SLING-2701?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13676992#comment-13676992
]
Dominik Smogór commented on SLING-2701:
---------------------------------------
I'm not sure, the SLING-2812 deals with tracking AuthenticationHandlers while
this one synchronizes changes in services delivering sling.auth.requirements.
The bug in question has shown up in connection with entries from CugSupportImpl
service from CQ5.4, one which isn't an AuthenticationHandler.
> SlingAuthenticator is volatile to multithreaded auth path updates.
> ------------------------------------------------------------------
>
> Key: SLING-2701
> URL: https://issues.apache.org/jira/browse/SLING-2701
> Project: Sling
> Issue Type: Bug
> Components: Authentication
> Affects Versions: Auth Core 1.0.6
> Environment: CQ 5.4
> Reporter: Dominik Smogór
> Assignee: Carsten Ziegeler
> Attachments: authcore-SLING-2701.patch
>
>
> SlingAuthenticator has a registered listener on services that share
> sling.auth.requirements service attributes.
> These paths serve as basis to PathBasedHolders that decide what request paths
> need to be authenticated.
> When the listener is called from multiple threads on the same service
> SlingAuthenticator PathBasedHolders cache gets corrupted due to insufficient
> synchronization. The effect is artificial multiplication of records.
> This patch adds synchronized block within the listener.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
