Uploaded image for project: 'Identity Gateway'
  1. Identity Gateway
  2. OPENIG-4405

A missing AMCtxId session property is not logged leading to an invalid session cache

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 6.0.0, 6.1.0, 6.5.0, 6.5.1, 6.5.2, 7.0.0
    • Fix Version/s: 6.5.3, 7.0.0
    • Component/s: Toolkit
    • Labels:
    • Environment:
      IG 6+ working with AM 5.5.x with sessionCaching enabled in AMService
    • Support Ticket IDs:
    • Story Points:
      1

      Description

      In org.forgerock.openig.tools.session.SessionInfoCache#mapSessionUidToSsoToken, the AMCtxId session property is read but never checked that it has a value before being used as a key in the sessionUidToCacheId map leading to an invalid cache setup and entries not being cleared when AM sends a session expired notification.

      A warning should be logged when the value is null/empty and the map should not updated.

       

        Attachments

          Activity

            People

            Assignee:
            markdr Mark de Reeper
            Reporter:
            markdr Mark de Reeper
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: