You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafficcontrol.apache.org by GitBox <gi...@apache.org> on 2022/04/05 19:52:39 UTC
[GitHub] [trafficcontrol] shamrickus opened a new issue, #6722: T3C keeps using old cookies on user change
shamrickus opened a new issue, #6722:
URL: https://github.com/apache/trafficcontrol/issues/6722
<!--
************ STOP!! ************
If this issue identifies a security vulnerability, DO NOT submit it! Instead, contact
the Apache Traffic Control Security Team at security@trafficcontrol.apache.org and follow the
guidelines at https://apache.org/security regarding vulnerability disclosure.
- For *SUPPORT QUESTIONS*, use the #traffic-control channel on the ASF slack (https://s.apache.org/tc-slack-request)
or the Traffic Control Users mailing list (send an email to users-subscribe@trafficcontrol.apache.org to subscribe).
- Before submitting, please **SEARCH GITHUB** for a similar issue or PR
* https://github.com/apache/trafficcontrol/issues
* https://github.com/apache/trafficcontrol/pulls
-->
<!-- Do not submit security vulnerabilities or support requests here - see above -->
## This Bug Report affects these Traffic Control components:
<!-- delete all those that don't apply -->
- Traffic Control Cache Config (`t3c`, formerly ORT)
## Current behavior:
If t3c is running, a cookie has been stored, and then the t3c user changes, t3c will continue using the old cookie even though it's for a different user. Since cookies are refreshed on request, the old cookie will also never expire (assuming t3c is running on a semi-regular cron).
<!-- Describe how the bug happens -->
## Expected behavior:
A user change to t3c should in someway invalidate the cookie if needed.
<!-- Describe what the behavior would be without the bug -->
## Steps to reproduce:
Run t3c as a user
Change the user it runs as
Run t3c again and it uses the old cookie
<!-- If the current behavior is a bug, please provide the *STEPS TO REPRODUCE* and
include the applicable TC version.
-->
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@trafficcontrol.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [trafficcontrol] rob05c commented on issue #6722: T3C keeps using old cookies on user change
Posted by GitBox <gi...@apache.org>.
rob05c commented on issue #6722:
URL: https://github.com/apache/trafficcontrol/issues/6722#issuecomment-1089293433
Easiest way is probably to store the user with the cookie cache, and check that it matches the current user before using it. Should be cheap and easy to do that client-side. @jpappa200
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@trafficcontrol.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [trafficcontrol] shamrickus closed issue #6722: T3C keeps using old cookies on user change
Posted by GitBox <gi...@apache.org>.
shamrickus closed issue #6722: T3C keeps using old cookies on user change
URL: https://github.com/apache/trafficcontrol/issues/6722
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@trafficcontrol.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org