Skip to content

Conversation

@backportbot-nextcloud
Copy link

backport of #34379

The session token renewal does
1) Read the old token
2) Write a new token
3) Delete the old token

If two processes succeed to read the old token there can be two new tokens because
the queries were not run in a transaction. This is particularly problematic on
clustered DBs where 1) would go to a read node and 2) and 3) go to a write node.

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
@juliusknorr juliusknorr added the 4. to release Ready to be released and/or waiting for tests to finish label Nov 3, 2022
Copy link
Member

@rullzer rullzer left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🐘

@PVince81 PVince81 merged commit de6012d into stable25 Nov 4, 2022
@PVince81 PVince81 deleted the backport/34379/stable25 branch November 4, 2022 16:10
@blizzz blizzz mentioned this pull request Nov 21, 2022
1 task
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

4. to release Ready to be released and/or waiting for tests to finish bug

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants