[ 
https://issues.apache.org/jira/browse/KNOX-2646?focusedWorklogId=641658&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-641658
 ]

ASF GitHub Bot logged work on KNOX-2646:
----------------------------------------

                Author: ASF GitHub Bot
            Created on: 25/Aug/21 12:34
            Start Date: 25/Aug/21 12:34
    Worklog Time Spent: 10m 
      Work Description: pzampino merged pull request #484:
URL: https://github.com/apache/knox/pull/484


   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Issue Time Tracking
-------------------

    Worklog Id:     (was: 641658)
    Time Spent: 1h 10m  (was: 1h)

> The tokenLimitPerUser check doesn't always work.
> ------------------------------------------------
>
>                 Key: KNOX-2646
>                 URL: https://issues.apache.org/jira/browse/KNOX-2646
>             Project: Apache Knox
>          Issue Type: Task
>            Reporter: Attila Magyar
>            Assignee: Attila Magyar
>            Priority: Major
>          Time Spent: 1h 10m
>  Remaining Estimate: 0h
>
> {code:java}
> if (tokenStateService.getTokens(p.getName()).size() == tokenLimitPerUser) {
>   log.tokenLimitExceeded(p.getName());
>   return Response.status(Response.Status.FORBIDDEN).entity("{ \"Unable to get 
> token - token limit exceeded.\" }").build();
> }
>  {code}
> We have an equality check when checking the max number of tokens per user. 
> But if the user already have N number of tokens, and later the admin changes 
> the gateway.knox.token.limit.per.user to a smaller number then this check 
> will never trigger.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to