You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@shiro.apache.org by "Les Hazlewood (JIRA)" <ji...@apache.org> on 2010/05/12 20:46:44 UTC

[jira] Created: (SHIRO-157) RememberMeManager should no longer be consulted once a remembered identity is discovered

RememberMeManager should no longer be consulted once a remembered identity is discovered
----------------------------------------------------------------------------------------

                 Key: SHIRO-157
                 URL: https://issues.apache.org/jira/browse/SHIRO-157
             Project: Shiro
          Issue Type: Bug
          Components: RememberMe, Subject
    Affects Versions: 1.0.0
            Reporter: Les Hazlewood
             Fix For: 1.0.0


When discovering principals (PrincipalCollection) during Subject creation:

If there are no principals associated with the subject being constructed and principals are found from rememberMe, those principals should be added to the session to ensure they can be retrieved from the session on later requests.  It is better to acquire this from the session so the RememberMeManager overhead (decryption and/or deserialization) is not incurred unnecessarily for every request.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Resolved: (SHIRO-157) RememberMeManager should no longer be consulted once a remembered identity is discovered

Posted by "Les Hazlewood (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/SHIRO-157?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Les Hazlewood resolved SHIRO-157.
---------------------------------

    Resolution: Fixed

Implementation complete - modified DefaultSecurityManager.resolvePrincipals method.  Logic is implemented in the new bindPrincipalsToSession method.

> RememberMeManager should no longer be consulted once a remembered identity is discovered
> ----------------------------------------------------------------------------------------
>
>                 Key: SHIRO-157
>                 URL: https://issues.apache.org/jira/browse/SHIRO-157
>             Project: Shiro
>          Issue Type: Bug
>          Components: RememberMe, Subject
>    Affects Versions: 1.0.0
>            Reporter: Les Hazlewood
>             Fix For: 1.0.0
>
>   Original Estimate: 0.17h
>  Remaining Estimate: 0.17h
>
> When discovering principals (PrincipalCollection) during Subject creation:
> If there are no principals associated with the subject being constructed and principals are found from rememberMe, those principals should be added to the session to ensure they can be retrieved from the session on later requests.  It is better to acquire this from the session so the RememberMeManager overhead (decryption and/or deserialization) is not incurred unnecessarily for every request.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.