Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-12421

Don't use distrbuted cache for storing Captcha's in a cluster

    XMLWordPrintable

Details

    Description

      The ConfluenceCachingCaptchaStore class has no explicit cache configuration in the confluence-coherence-cache-config-clustered.xml meaning that it will by default use a replicated cache.

      It seems that our current version of jcaptcha has a bug which can mean deserialization fails in certain circumstances and by using a distributed cache we can fall victim to this defect. See http://forge.octo.com/jcaptcha/jira/browse/FWK-80

      We can avoid this problem by not using a distributed cache, but also there is probably no need to be caching captcha's across all nodes in the cluster. With session affinity the captcha doesn't need to be cached beyond the node it was generated on.

      We should probably just add something like -

              <cache-mapping>
                  <cache-name>com.atlassian.confluence.cache.jcaptcha.ConfluenceCachingCaptchaStore</cache-name>
                  <scheme-name>local:default</scheme-name>
              </cache-mapping>
      

      This is raised from the support case https://support.atlassian.com/browse/CSP-20815

      Attachments

        Activity

          People

            jclark@atlassian.com Joe Clark
            pcurren Paul Curren
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - 1h
                1h
                Remaining:
                Remaining Estimate - 1h
                1h
                Logged:
                Time Spent - Not Specified
                Not Specified