[
https://issues.apache.org/jira/browse/ARTEMIS-5310?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Justin Bertram updated ARTEMIS-5310:
------------------------------------
Summary: Check class of Principals in Subject (was: Cache Subject last)
> Check class of Principals in Subject
> ------------------------------------
>
> Key: ARTEMIS-5310
> URL: https://issues.apache.org/jira/browse/ARTEMIS-5310
> Project: ActiveMQ Artemis
> Issue Type: Dependency upgrade
> Reporter: Justin Bertram
> Assignee: Justin Bertram
> Priority: Major
>
> It's possible that a user is properly authenticated and their valid
> {{Subject}} cached but then fail to be granted access due to another problem
> (e.g. the {{LoginModule}} implementation returns an unexpected
> {{UserPrincipal}} implementation). Furthermore, upon retry the user will be
> granted access due to the cached {{Subject}} which is confusing.
> This can be resolve by caching the {{Subject}} after all other
> security-related logic is executed.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
For further information, visit: https://activemq.apache.org/contact
