Project

General

Custom queries

Profile

Actions

Bug #23920

closed

Lift Async system is not able to find spring SecurityContextHolder

Added by François ARMAND over 1 year ago. Updated over 1 year ago.

Status:
Released
Priority:
N/A
Category:
Architecture - Code maintenance
Target version:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
To do
Regression:
No

Description

In https://github.com/Normation/rudder/pull/5229 I changed the way that CurrentUser was computed and stored in session because it lead to error in several page.

At the time, I supposed it was due to the session fixation prevention process built in spring security, and that lift was trying to use the old (destroyed) session in place of the new one in some context.
That first correction helped, but we still have a problem: in the context of async requests (at least when using lazy-load which uses under the hood AsyncRenderComet.asyncRender), SecurityContextHolder is lost.

I suppose it have to do with the way the session snapshot is done, and perhaps of a similar cause than previously (session moved in the async context?)


Related issues 3 (0 open3 closed)

Related to Rudder - Architecture #23797: Backend evolution for node RBAC: add tenants domain conceptReleasedVincent MEMBRÉActions
Related to Rudder - Bug #24017: Webapp can fail to start with null sessionid error ReleasedFrançois ARMANDActions
Related to Rudder - Bug #24117: Missing policy generation statusReleasedVincent MEMBRÉActions
#1

Updated by François ARMAND over 1 year ago

  • Status changed from New to In progress
#2

Updated by François ARMAND over 1 year ago

  • Status changed from In progress to Pending technical review
  • Assignee changed from François ARMAND to Vincent MEMBRÉ
  • Pull Request set to https://github.com/Normation/rudder/pull/5267
#3

Updated by Anonymous over 1 year ago

  • Status changed from Pending technical review to Pending release
#4

Updated by François ARMAND over 1 year ago

  • Related to Bug #5229: ncf-api needs to adjust permissions on .git added
#5

Updated by François ARMAND over 1 year ago

  • Related to deleted (Bug #5229: ncf-api needs to adjust permissions on .git )
#6

Updated by François ARMAND over 1 year ago

  • Related to Architecture #23797: Backend evolution for node RBAC: add tenants domain concept added
#7

Updated by François ARMAND over 1 year ago

  • Related to Bug #24017: Webapp can fail to start with null sessionid error added
#8

Updated by François ARMAND over 1 year ago

  • Related to Bug #24117: Missing policy generation status added
#9

Updated by Vincent MEMBRÉ over 1 year ago

  • Status changed from Pending release to Released
Actions

Also available in: Atom PDF