[jboss-jira] [JBoss JIRA] (WFLY-5032) Authentication token in session triggers replication of session each request

Kabir Khan (JIRA) issues at jboss.org
Wed Dec 6 11:21:20 EST 2017


     [ https://issues.jboss.org/browse/WFLY-5032?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Kabir Khan closed WFLY-5032.
----------------------------


> Authentication token in session triggers replication of session each request
> ----------------------------------------------------------------------------
>
>                 Key: WFLY-5032
>                 URL: https://issues.jboss.org/browse/WFLY-5032
>             Project: WildFly
>          Issue Type: Bug
>          Components: Clustering
>    Affects Versions: 10.0.0.Alpha6
>            Reporter: Paul Ferraro
>            Assignee: Paul Ferraro
>             Fix For: 10.0.0.Beta1
>
>
> If an authentication token exists in the web session, and the user is using FORM or a custom authentication mechanism, then that token is read from the session each request.  The token is treated as a mutable object by the clustering code and triggers replication of the session on each request.
> Annotating this with @Immutable will fix the problem.



--
This message was sent by Atlassian JIRA
(v7.5.0#75005)


More information about the jboss-jira mailing list