You are viewing a plain text version of this content. The canonical link for it is here.
Posted to oak-issues@jackrabbit.apache.org by "Julian Reschke (Jira)" <ji...@apache.org> on 2025/11/25 15:15:00 UTC
[jira] [Closed] (OAK-11899) Empty tokenLength property values cause token not being generated
[ https://issues.apache.org/jira/browse/OAK-11899?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Julian Reschke closed OAK-11899.
--------------------------------
> Empty tokenLength property values cause token not being generated
> -----------------------------------------------------------------
>
> Key: OAK-11899
> URL: https://issues.apache.org/jira/browse/OAK-11899
> Project: Jackrabbit Oak
> Issue Type: Bug
> Components: core, security
> Reporter: Alejandro Moratinos
> Assignee: Alejandro Moratinos
> Priority: Major
> Fix For: 1.88.0
>
>
> Depending on the token configuration values [TokenConfigurationImpl|https://github.com/apache/jackrabbit-oak/blob/trunk/oak-core/src/main/java/org/apache/jackrabbit/oak/security/authentication/token/TokenConfigurationImpl.java#L72-L75] allows an empty value to be introduced.
> If an empty string is added later in the [TokenProviderImpl|https://github.com/apache/jackrabbit-oak/blob/trunk/oak-core/src/main/java/org/apache/jackrabbit/oak/security/authentication/token/TokenProviderImpl.java#L436] the default value should be used but as the value cannot be transformed to an integer the transformation fails so a Token it's not created.
> Check this log output:
> {noformat}
> 24.08.2025 19:23:53.304 *DEBUG* org.apache.jackrabbit.oak.security.authentication.LoginContextProviderImpl Found pre-authenticated subject: No further login actions required.
> 24.08.2025 19:23:53.304 *DEBUG* org.apache.jackrabbit.oak.security.authentication.LoginContextProviderImpl Found pre-authenticated subject: No further login actions required.
> 24.08.2025 19:23:53.305 *DEBUG* ] org.apache.jackrabbit.oak.security.authentication.user.LoginModuleImpl Adding Credentials to shared state.
> 24.08.2025 19:23:53.305 *DEBUG* org.apache.jackrabbit.oak.security.authentication.user.LoginModuleImpl Adding login name to shared state.
> 24.08.2025 19:23:53.305 *WARN* org.apache.jackrabbit.oak.spi.security.ConfigurationParameters Invalid value ; cannot be parsed into java.lang.Integer{noformat}
>
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)