[jboss-jira] [JBoss JIRA] (WFLY-5032) Authentication token in session triggers replication of session each request

[Paul Ferraro (JIRA)]

Paul Ferraro created WFLY-5032:
----------------------------------

             Summary: Authentication token in session triggers replication of session each request
                 Key: WFLY-5032
                 URL: https://issues.jboss.org/browse/WFLY-5032
             Project: WildFly
          Issue Type: Bug
          Components: Clustering
    Affects Versions: 10.0.0.Alpha6
            Reporter: Paul Ferraro
            Assignee: Paul Ferraro


If an authentication token exists in the web session, and the user is using FORM or a custom authentication mechanism, then that token is read from the session each request.  The token is treated as a mutable object by the clustering code and triggers replication of the session on each request.

Annotating this with @Immutable will fix the problem.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)