[jira] Closed: (OWB-351) OWB picks up @SessionScoped contextual instances from expired sessions

["Gurkan Erdogdu (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/OWB-351?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Gurkan Erdogdu closed OWB-351.
------------------------------

    Resolution: Fixed

I think this issue has solved.

> OWB picks up @SessionScoped contextual instances from expired sessions
> ----------------------------------------------------------------------
>
>                 Key: OWB-351
>                 URL: https://issues.apache.org/jira/browse/OWB-351
>             Project: OpenWebBeans
>          Issue Type: Bug
>          Components: Context and Scopes
>    Affects Versions: M4
>            Reporter: Mark Struberg
>            Assignee: Mark Struberg
>            Priority: Blocker
>             Fix For: 1.0.0
>
>
> We currently store the CreationalContext instance from creating time inside the NormalScopedBeanInterceptorHandler.
> This leads to the fact that we pickup the contextual instance stored in that very CreationalContext even if the context itself is long time gone (e.g. if the session expired. This also leads to the side effect that we currently pickup contextual instances from the wrong session if the proxy gets injected into a wider scoped instance (e.g. an @ApplicationScoped bean).
> Thus, we must drop the CreationalContext from all our NormalScoped proxies and create a new CreationalContext each time we create a new contextual instance.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.