[ https://issues.apache.org/jira/browse/OAK-8870?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17025637#comment-17025637 ]
Julian Reschke edited comment on OAK-8870 at 8/30/23 10:58 AM: --------------------------------------------------------------- trunk: (1.24.0) [9b78a60d5d|https://github.com/apache/jackrabbit-oak/commit/9b78a60d5d0c3e199c006d92590dc29d39379679] 1.22: (1.22.1) [21a47b758b|https://github.com/apache/jackrabbit-oak/commit/21a47b758bb24b1327c795cf421dc755f7959d2f] ...in retired branches: 1.10: (1.10.8) [138318257a|https://github.com/apache/jackrabbit-oak/commit/138318257a57703ef6dd0f7430c115f41ffe8f85] 1.8: (1.8.20) [e7180a8d9c|https://github.com/apache/jackrabbit-oak/commit/e7180a8d9c4f14b2de1928861dd27287e5fb59bd] 1.6: (1.6.20) [b615992fc5|https://github.com/apache/jackrabbit-oak/commit/b615992fc5202046e9479a29d6a7bd41d6258d09] 1.4: (1.4.26) [3e1c6e13b6|https://github.com/apache/jackrabbit-oak/commit/3e1c6e13b67331710a1747223d8e6ee22c5fae9c] 1.2: [756d0387ef|https://github.com/apache/jackrabbit-oak/commit/756d0387ef39dc3a7a84f6644a318e74535953e6] was (Author: reschke): trunk: (1.24.0) [r1873103|http://svn.apache.org/r1873103] 1.22: [r1873417|http://svn.apache.org/r1873417] 1.10: (1.10.8) [r1873106|http://svn.apache.org/r1873106] 1.8: (1.8.20) [r1873258|http://svn.apache.org/r1873258] 1.6: (1.6.20) [r1873259|http://svn.apache.org/r1873259] 1.4: [r1873260|http://svn.apache.org/r1873260] 1.2: [r1873261|http://svn.apache.org/r1873261] > UserAuthentication.authenticate should remove pw attribute > ---------------------------------------------------------- > > Key: OAK-8870 > URL: https://issues.apache.org/jira/browse/OAK-8870 > Project: Jackrabbit Oak > Issue Type: Bug > Components: core, security > Affects Versions: 1.2, 1.4, 1.6.0, 1.8.0, 1.10.0, 1.12.0, 1.14.0, 1.16.0, > 1.18.0, 1.20.0, 1.22.0 > Reporter: Angela Schreiber > Assignee: Angela Schreiber > Priority: Critical > Labels: candidate_oak_1_22 > Fix For: 1.24.0, 1.10.8, 1.6.20, 1.4.26, 1.8.20, 1.22.1 > > > I noticed that {{UserAuthentication.authenticate(Credentials)}} does not > remove the optional {{CREDENTIALS_ATTRIBUTE_NEWPASSWORD}} upon completion of > the authentication step. -- This message was sent by Atlassian Jira (v8.20.10#820010)