Guido Wimmel created SYNCOPE-651:
------------------------------------
Summary: SyncopeUser:checkToken() should fail if token is not set
on user
Key: SYNCOPE-651
URL: https://issues.apache.org/jira/browse/SYNCOPE-651
Project: Syncope
Issue Type: Improvement
Components: core
Affects Versions: 1.2.2, 1.1.8
Reporter: Guido Wimmel
Priority: Minor
Fix For: 1.1.9, 1.2.3, 2.0.0
Currently, SyncopeUser:checkToken(String token) always returns true if
user.token==null (i.e., the token attribute is not set). This is
counterintuitive if the token parameter is not null (as the token passed as a
parameter is obviously not valid).
To make workflow implementations more robust, SyncopeUser:checkToken(String
token) should return false if the token parameter is not null and user.token is
null.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
