You are viewing a plain text version of this content. The canonical link for it is here.

Posted to oak-issues@jackrabbit.apache.org by "Alex Deparvu (JIRA)" <ji...@apache.org> on 2017/11/14 09:56:01 UTC

[jira] [Created] (OAK-6940) Login token name generation is prone to race conditions

Alex Deparvu created OAK-6940:
---------------------------------

             Summary: Login token name generation is prone to race conditions
                 Key: OAK-6940
                 URL: https://issues.apache.org/jira/browse/OAK-6940
             Project: Jackrabbit Oak
          Issue Type: Improvement
          Components: core, security
            Reporter: Alex Deparvu
            Assignee: Alex Deparvu
            Priority: Minor


Under high concurrency the {{TokenProviderImpl#generateTokenName}} method can return the same value, causing the commit to fail and be retried with a generic UUID value.
This seems pretty expensive (benchmarks to follow) and it would probably be best to try using a random value every time, sacrificing the 'human readable' property of the node name.

fyi [~anchela]



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)