Vlad Arkhipov created WFLY-1371: ----------------------------------- Summary: AuthorizationModule.destroy is never called Key: WFLY-1371 URL: https://issues.jboss.org/browse/WFLY-1371 Project: WildFly Issue Type: Bug Components: Security Reporter: Vlad Arkhipov Assignee: Darran Lofthouse If you define a custom authorization module in configuration XML, it's org.jboss.security.authorization.AuthorizationModule.destroy() is never called. So if you have some stuff in it's sharedState field, it leads to a memory leak. I'm not quite sure which project is responsible for the calling of this method PicketBox of WildFly. As a workaround I currently clear sharedState field in abort() and commit() methods. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira