Details

    • Type: Bug
    • Status: Resolved (View Workflow)
    • Priority: Major
    • Resolution: Done
    • Affects Version/s: None
    • Fix Version/s: 3.9.0.Final
    • Component/s: None
    • Labels:
      None

      Description

      All ApplicationLifecycle starts should be always ended to prevent idm session leak.
      We noticed in some cases that The ApplicationLifeCycle isn't closed :

      try {
                  for (ApplicationLifecycle<RequestContext> lifecycle : getApplicationLifecycle()) {
                      lifecycle.onStartRequest(this, context);
                  }
                   ...
      .....
              } finally {
                  WebuiRequestContext.setCurrentInstance(parentAppRequestContext);
              }

      This case appears In /webui/portlet/src/main/java/org/exoplatform/webui/application/portlet/PortletApplication.java in these methods :

      • serveResource(ResourceRequest req, ResourceResponse res)
      • processEvent(EventRequest req, EventResponse res)
      • processAction(ActionRequest req, ActionResponse res)

      PS : In the comment of the method serverResource(), it's already mentioned that "onEndRequest()" call should be invoqued in the finally block.

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                trong.tran Trong Tran
                Reporter:
                trong.tran Trong Tran
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: