[jboss-jira] [JBoss JIRA] (WFLY-7096) Security domain casche dosn't respect infinispan settings

[Darran Lofthouse (JIRA)]

     [ https://issues.jboss.org/browse/WFLY-7096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse reassigned WFLY-7096:
--------------------------------------

    Assignee:     (was: Darran Lofthouse)


> Security domain casche dosn't respect infinispan settings
> ---------------------------------------------------------
>
>                 Key: WFLY-7096
>                 URL: https://issues.jboss.org/browse/WFLY-7096
>             Project: WildFly
>          Issue Type: Feature Request
>          Components: Security
>    Affects Versions: 10.0.0.Final, 10.1.0.Final
>         Environment: Tested on Windows 7
>            Reporter: Marcin Fatyga
>         Attachments: patch.txt, standalone.xml, test_webapp.zip
>
>
> In securitydomain we can set "casche-type" to infinispan. Auntentication request ara now stored in infinispan casch, but any settings of this casche (configured in infinispan subsystem) are not applied. Casche is always stored in memory and never expiries.
> This is serious security issue because after first authentication request credentials, will never be verified again.



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)