eclipse-ee4j / eclipse-ee4j/metro-wsit

SAML insertion fails periodically during high contention

Open
#388 0 comments 0 reactions 0 assignees View on GitHub
Component: security ERR: Assignee Priority: Major Type: Bug
Dominant language
Java
Stars
6
Forks
21
Avg merge
10h 2m
Merged PRs (30d)
1

Description

There is a race condition in the SAML security policy handling. This causes the attachment of the SAML assertion to fail periodically in high contention situations.
#### Affected Versions
[2.1.1]

Source: [https://github.com/javaee/metro-wsit/issues/1686](https://github.com/javaee/metro-wsit/issues/1686)
Author: glassfishrobot

Contributor guide

Open the contributing guide

Research direction

No source file, test, or entry point is named. Start by locating the SAML security policy handling and reproduce assertion-attachment failures under high contention; done means the assertion attaches reliably in that situation.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.