You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@shiro.apache.org by "leven.chen (Jira)" <ji...@apache.org> on 2020/11/13 04:29:00 UTC

[jira] [Created] (SHIRO-799) When ThreadContext works with ThreadPool bring security issues

leven.chen created SHIRO-799:
--------------------------------

             Summary: When ThreadContext works with ThreadPool bring security issues
                 Key: SHIRO-799
                 URL: https://issues.apache.org/jira/browse/SHIRO-799
             Project: Shiro
          Issue Type: Bug
          Components: Authorization (access control) 
    Affects Versions: 1.7.0, 1.4.0
            Reporter: leven.chen


Beacause ThreadContext use InheritableThreadLocalMap  , but when it work with ThreadPool , it  bring security problem. Although, we can use  SubjectAwareExecutor or  SubjectAwareExecutorService to fix this problem. but not elegant . Maybe use ThreadLocal or *[Transmittable-thread-local|https://github.com/alibaba/transmittable-thread-local]*  better then InheritableThreadLocal



--
This message was sent by Atlassian Jira
(v8.3.4#803005)