[ https://issues.apache.org/jira/browse/WICKET-5855?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Martin Grigorov resolved WICKET-5855. ------------------------------------- Resolution: Fixed Fix Version/s: 7.0.0-M6 6.20.0 > RememberMe functionality seems to be broken after the change of the default > crypt factory > ----------------------------------------------------------------------------------------- > > Key: WICKET-5855 > URL: https://issues.apache.org/jira/browse/WICKET-5855 > Project: Wicket > Issue Type: Bug > Components: wicket-auth-roles > Affects Versions: 7.0.0-M5, 6.19.0 > Reporter: Martin Grigorov > Assignee: Martin Grigorov > Fix For: 6.20.0, 7.0.0-M6 > > > The fix for CVE-2014-7808 seems to break the "rememberMe" functionality in > wicket-auth-roles. > DefaultAuthenticationStrategy uses the crypt factory to encrypt the user > credentials. After restart of the application a new crypt factory is created > with a new secret key. Now it is not possible to decrypt the saved > credentials. -- This message was sent by Atlassian JIRA (v6.3.4#6332)