Alex Deparvu created OAK-6940:
---------------------------------

             Summary: Login token name generation is prone to race conditions
                 Key: OAK-6940
                 URL: https://issues.apache.org/jira/browse/OAK-6940
             Project: Jackrabbit Oak
          Issue Type: Improvement
          Components: core, security
            Reporter: Alex Deparvu
            Assignee: Alex Deparvu
            Priority: Minor


Under high concurrency the {{TokenProviderImpl#generateTokenName}} method can 
return the same value, causing the commit to fail and be retried with a generic 
UUID value.
This seems pretty expensive (benchmarks to follow) and it would probably be 
best to try using a random value every time, sacrificing the 'human readable' 
property of the node name.

fyi [~anchela]



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to