[JIRA] (JENKINS-59107) User logged out after successful configuration of "Run as Specific User" (as of Jenkins 2.150.2)

[rene.sche...@gmail.com (JIRA)]

Title: Message Title

René Scheibe created an issue   Jenkins / JENKINS-59107 User logged out after successful configuration of "Run as Specific User" (as of Jenkins 2.150.2) Issue Type: Bug Assignee: Unassigned Components: authorize-project-plugin Created: 2019-08-27 19:35 Environment: Jenkins >=2.150.2, authorize-project-plugin v1.3.0 Priority: Minor Reporter: René Scheibe Actual behaviour As user "A" when configuring authorization using the "Run as Specific User" strategy to run a job as user "B" after successful authentication with the password of user "B" user "A" is logged out. Expected behaviour User "A" is still logged in. Root Cause Analysis This issue is present starting with Jenkins 2.150.2 which implemented new security measures for user sessions (see changelog https://jenkins.io/changelog-stable/#v2.150.2). It seems that the below call from here invalidates the current user session: Jenkins.getActiveInstance().getSecurityRealm().getSecurityComponents().manager.authenticate( new UsernamePasswordAuthenticationToken(userId, password) ); Add Comment   This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-issues/JIRA.201530.1566934526000.1050.1566934560315%40Atlassian.JIRA.