Uploaded image for project: 'Crowd Data Center'
  1. Crowd Data Center
  2. CWD-4342

Don't try to invalidate a session ID of an empty string

    XMLWordPrintable

Details

    • Suggestion
    • Resolution: Fixed
    • 2.8.3
    • None
    • None

    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

    Description

      Since CWD-4271, deleting an empty session token results in invalidating all sessions. As this was never an expected value, specifically check for it and fail locally.

      At the same time, check for cases that are calling this conditionally on having a session token and ensure they don't treat it as something that can be invalidated.

      Attachments

        Issue Links

          causes

          Bug - A problem which impairs or prevents the functions of the product. JRACLOUD-65801 All users are logged out of JIRA Cloud every 1 or 2 minutes

          • Low - Low priority issues
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. JRACLOUD-41559 Some REST calls return 200 with no body and AUTHENTICATED_FAILED

          • Medium - Medium priority issues
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. JRACLOUD-65801 All users are logged out of JIRA Cloud every 1 or 2 minutes

          • Low - Low priority issues
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. JRASERVER-41559 Some REST calls return 200 with no body and AUTHENTICATED_FAILED

          • Medium - Medium priority issues
          • Gathering Impact
          relates to

          Bug - A problem which impairs or prevents the functions of the product. JRACLOUD-65853 Upgrade Crowd to 2.8.3+

          • Medium - Medium priority issues
          • Closed

          Suggestion - CWD-4271 As an admin, I want to bulk-expire SSO sessions

          • Closed
          mentioned in

          Page Loading...

          Page Loading...

          Activity

            People

              jwalton joe
              jwalton joe
              Votes:
              0 Vote for this issue
              Watchers:
              11 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: