[jira] [Commented] (ISIS-2981) [Wicket Viewer] Login/rememberMe not working across App-Restarts when Prototyping

["ASF subversion and git services (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/ISIS-2981?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17510420#comment-17510420 ] 

ASF subversion and git services commented on ISIS-2981:
-------------------------------------------------------

Commit 658dd9032a995d8be611abde444478defd29f912 in isis's branch refs/heads/master from Andi Huber
[ https://gitbox.apache.org/repos/asf?p=isis.git;h=658dd90 ]

ISIS-2981: adds special crypto code to handle prototyping scenario

> [Wicket Viewer] Login/rememberMe not working across App-Restarts when Prototyping
> ---------------------------------------------------------------------------------
>
>                 Key: ISIS-2981
>                 URL: https://issues.apache.org/jira/browse/ISIS-2981
>             Project: Isis
>          Issue Type: Improvement
>          Components: Isis Viewer Wicket
>    Affects Versions: 2.0.0-M7
>            Reporter: Andi Huber
>            Assignee: Andi Huber
>            Priority: Minor
>             Fix For: 2.0.0-RC1
>
>
> Login with remember me stores login secrets with cookies. However, after app restart, on loading (secret recovery), decryption fails with
> javax.crypto.BadPaddingException: Given final block not properly padded. Such issues can arise if a bad key is used during decryption.
> Which seems correct behavior, as the salt changes with each app restart. 
> However, for a prototyping scenario we'd rather want to keep a fixed salt.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)