Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

SessionAuthentication._session is not marked as transient #12309

Closed
janbartel opened this issue Sep 25, 2024 · 0 comments · Fixed by #12310
Closed

SessionAuthentication._session is not marked as transient #12309

janbartel opened this issue Sep 25, 2024 · 0 comments · Fixed by #12310
Assignees
Labels
Bug For general bugs on Jetty side

Comments

@janbartel
Copy link
Contributor

Jetty version(s)
jetty-12.0.x

Jetty Environment
core security

The org.eclipse.jetty.security.authentication.SessionAuthentication class has a HttpSession _session data member which must be marked as transient to prevent it being serialized. This keyword is missing.

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
Bug For general bugs on Jetty side
Projects
No open projects
Status: ✅ Done
Development

Successfully merging a pull request may close this issue.

1 participant