Hi Rob,

> Crickey!!!
> This is tracked by http://issues.apache.org/activemq/browse/AMQ-2335 -
> I don't think there's a work around without extending an existing
> AuthenticationBroker (same package as AuthenticationPlugins) to copy
> the ConnectionInfo - remove the username/password from the copy and
> pass the copy through the BrokerFilter chain (super.addConnection());

Thanks for that very quick fix!

Luckily I am already developing my own plugin, so I can apply the same
fix there so that we don't have to wait for 5.3 to be released.

I'm going to assume that removing at least the password that early isn't
going to affect brokers further down the stack.

Mats

Reply via email to