[
https://issues.apache.org/jira/browse/OAK-6940?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16251191#comment-16251191
]
Vikas Saurabh commented on OAK-6940:
------------------------------------
bq. sacrificing the 'human readable' property of the node name.
I wonder if some random data is only suffixed to human readable part... That
might save the sacrifice.
> Login token name generation is prone to race conditions
> -------------------------------------------------------
>
> Key: OAK-6940
> URL: https://issues.apache.org/jira/browse/OAK-6940
> Project: Jackrabbit Oak
> Issue Type: Improvement
> Components: core, security
> Reporter: Alex Deparvu
> Assignee: Alex Deparvu
> Priority: Minor
>
> Under high concurrency the {{TokenProviderImpl#generateTokenName}} method can
> return the same value, causing the commit to fail and be retried with a
> generic UUID value.
> This seems pretty expensive (benchmarks to follow) and it would probably be
> best to try using a random value every time, sacrificing the 'human readable'
> property of the node name.
> fyi [~anchela]
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
