Ensure that generated rememberme token is really unique ------------------------------------------------------- Key: GTNPORTAL-2771 URL: https://issues.jboss.org/browse/GTNPORTAL-2771 Project: GateIn Portal Issue Type: Bug Security Level: Public(Everyone can see) Reporter: Marek Posolda Assignee: Marek Posolda Labels: EPP6.0-Test-Dev Fix For: 3.6.0.Final Currently we are generating random rememberme tokens based on random int number (random.nextInt()). In systems with millions or many thousands login, this discriminator is not enough. We should improve it and fix it either by: 1) Ensure that generated token is really unique. In system with many logins the random number may not be unique enough, so we need to add other info (like System.currentTimeMillis() or counter or both...) 2) In case that token already exists, we should generate other one instead of refresh the current one. Maybe combination of both approaches would be best :-)