You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@ofbiz.apache.org by "ashishvijaywargiya (via GitHub)" <gi...@apache.org> on 2026/08/24 08:31:28 UTC
[PR] Improved externalLoginKey handling for cross-application navigation (…#1710) [ofbiz-framework]
ashishvijaywargiya opened a new pull request, #1713:
URL: https://github.com/apache/ofbiz-framework/pull/1713
- External login keys are now single-use per webapp and time-limited, instead of a reusable token stored indefinitely in a JVM-wide map.
- Key is no longer attached to inter-app link targets that carry a scheme or a network-path authority (widget links and tree links).
- A failed base-permission/logout check is now treated as a no-op instead of proceeding with a null userLogin.
- Key usage is tracked per webapp, so a key stays usable for the other webapps it was issued for.
Thank you Krishna Uprit for the contribution.
Cherry-picked from trunk commit 5f919b428ba43eff02e6be1712de30880f0bfc34, excluding test-only changes.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@ofbiz.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Improved externalLoginKey handling for cross-application navigation (…#1710) [ofbiz-framework]
Posted by "jacopoc (via GitHub) via notifications" <no...@ofbiz.apache.org>.
jacopoc commented on PR #1713:
URL: https://github.com/apache/ofbiz-framework/pull/1713#issuecomment-6637576675
CVE-2026-82907
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@ofbiz.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Improved externalLoginKey handling for cross-application navigation (…#1710) [ofbiz-framework]
Posted by "ashishvijaywargiya (via GitHub)" <gi...@apache.org>.
ashishvijaywargiya merged PR #1713:
URL: https://github.com/apache/ofbiz-framework/pull/1713
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@ofbiz.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org