You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@sling.apache.org by ro...@apache.org on 2020/05/08 12:29:42 UTC
[sling-org-apache-sling-auth-form] branch master updated (484baa0
-> 1a4413c)
This is an automated email from the ASF dual-hosted git repository.
rombert pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/sling-org-apache-sling-auth-form.git.
from 484baa0 [maven-release-plugin] prepare release org.apache.sling.auth.form-1.0.18
new e8769c8 [maven-release-plugin] prepare for next development iteration
new 1a4413c SLING-9433 - Do not log stack trace in case of cookies with no match in the token store
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
pom.xml | 4 ++--
src/main/java/org/apache/sling/auth/form/impl/TokenStore.java | 4 ++++
2 files changed, 6 insertions(+), 2 deletions(-)
[sling-org-apache-sling-auth-form] 02/02: SLING-9433 - Do not log
stack trace in case of cookies with no match in the token store
Posted by ro...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
rombert pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/sling-org-apache-sling-auth-form.git
commit 1a4413c5912b55ac9306dc97e3e0dc1b5ea0dfc7
Author: Robert Munteanu <ro...@apache.org>
AuthorDate: Fri May 8 14:29:18 2020 +0200
SLING-9433 - Do not log stack trace in case of cookies with no match in the token store
---
src/main/java/org/apache/sling/auth/form/impl/TokenStore.java | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/src/main/java/org/apache/sling/auth/form/impl/TokenStore.java b/src/main/java/org/apache/sling/auth/form/impl/TokenStore.java
index b97ac15..8ff67fd 100644
--- a/src/main/java/org/apache/sling/auth/form/impl/TokenStore.java
+++ b/src/main/java/org/apache/sling/auth/form/impl/TokenStore.java
@@ -222,6 +222,10 @@ class TokenStore {
try {
SecretKey secretKey = currentTokens[tokenNumber];
+ if ( secretKey == null ) {
+ log.error("AuthNCookie value '{}' points to an unknown token number", value);
+ return false;
+ }
String hmac = encode(cookieTime, parts[2], tokenNumber,
secretKey);
return value.equals(hmac);
[sling-org-apache-sling-auth-form] 01/02: [maven-release-plugin]
prepare for next development iteration
Posted by ro...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
rombert pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/sling-org-apache-sling-auth-form.git
commit e8769c8d2bba838d705971ea418a37a2718a363d
Author: Robert Munteanu <ro...@apache.org>
AuthorDate: Fri May 8 14:01:25 2020 +0200
[maven-release-plugin] prepare for next development iteration
---
pom.xml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/pom.xml b/pom.xml
index e003068..32e54a7 100644
--- a/pom.xml
+++ b/pom.xml
@@ -20,7 +20,7 @@
</parent>
<artifactId>org.apache.sling.auth.form</artifactId>
- <version>1.0.18</version>
+ <version>1.0.19-SNAPSHOT</version>
<name>Apache Sling Form Based Authentication</name>
<description>
@@ -39,7 +39,7 @@
<connection>scm:git:https://gitbox.apache.org/repos/asf/sling-org-apache-sling-auth-form.git</connection>
<developerConnection>scm:git:https://gitbox.apache.org/repos/asf/sling-org-apache-sling-auth-form.git</developerConnection>
<url>https://gitbox.apache.org/repos/asf?p=sling-org-apache-sling-auth-form.git</url>
- <tag>org.apache.sling.auth.form-1.0.18</tag>
+ <tag>HEAD</tag>
</scm>