[jira] [Updated] (SLING-2701) SlingAuthenticator is volatile to multithreaded auth path updates.

["Carsten Ziegeler (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SLING-2701?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Carsten Ziegeler updated SLING-2701:
------------------------------------

    Fix Version/s: Auth Core 1.1.4
    
> SlingAuthenticator is volatile to multithreaded auth path updates.
> ------------------------------------------------------------------
>
>                 Key: SLING-2701
>                 URL: https://issues.apache.org/jira/browse/SLING-2701
>             Project: Sling
>          Issue Type: Bug
>          Components: Authentication
>    Affects Versions: Auth Core 1.0.6
>         Environment: CQ 5.4
>            Reporter: Dominik Smogór
>            Assignee: Carsten Ziegeler
>             Fix For: Auth Core 1.1.4
>
>         Attachments: authcore-SLING-2701.patch
>
>
> SlingAuthenticator has a registered listener on services that share sling.auth.requirements service attributes.
> These paths serve as basis to PathBasedHolders that decide what request paths need to be authenticated.
> When the listener is called from multiple threads on the same service SlingAuthenticator PathBasedHolders cache gets corrupted due to insufficient synchronization. The effect is artificial multiplication of records.
> This patch adds synchronized block within the listener.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira