You are viewing a plain text version of this content. The canonical link for it is here.
Posted to oak-issues@jackrabbit.apache.org by "Julian Reschke (Jira)" <ji...@apache.org> on 2020/01/29 06:31:00 UTC

[jira] [Commented] (OAK-8870) UserAuthentication.authenticate should remove pw attribute

    [ https://issues.apache.org/jira/browse/OAK-8870?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17025637#comment-17025637 ] 

Julian Reschke commented on OAK-8870:
-------------------------------------

1.10: (1.10.8) [r1873106|http://svn.apache.org/r1873106]
1.8: (1.8.20) [r1873258|http://svn.apache.org/r1873258]
1.6: [r1873259|http://svn.apache.org/r1873259]
1.4: [r1873260|http://svn.apache.org/r1873260]
1.2: [r1873261|http://svn.apache.org/r1873261]


> UserAuthentication.authenticate should remove pw attribute
> ----------------------------------------------------------
>
>                 Key: OAK-8870
>                 URL: https://issues.apache.org/jira/browse/OAK-8870
>             Project: Jackrabbit Oak
>          Issue Type: Bug
>          Components: core
>    Affects Versions: 1.2, 1.4, 1.6.0, 1.8.0, 1.10.0, 1.12.0, 1.14.0, 1.16.0, 1.18.0, 1.20.0, 1.22.0
>            Reporter: Angela Schreiber
>            Assignee: Angela Schreiber
>            Priority: Critical
>             Fix For: 1.24.0, 1.10.8, 1.6.20, 1.8.20
>
>
> I noticed that {{UserAuthentication.authenticate(Credentials)}} does not remove the optional {{CREDENTIALS_ATTRIBUTE_NEWPASSWORD}} upon completion of the authentication step.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)