nextcloud/lib/private/Authentication
Christoph Wurst 6d2677b2bb
Run session token renewals in a database transaction
The session token renewal does
1) Read the old token
2) Write a new token
3) Delete the old token

If two processes succeed to read the old token there can be two new tokens because
the queries were not run in a transaction. This is particularly problematic on
clustered DBs where 1) would go to a read node and 2) and 3) go to a write node.

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2022-11-03 16:39:41 +01:00
..
Events Update php licenses 2021-06-04 22:02:41 +02:00
Exceptions Update php licenses 2021-06-04 22:02:41 +02:00
Listeners remove storage wrappers when deleting the user storage 2022-06-10 15:40:22 +00:00
Login Update php licenses 2021-06-04 22:02:41 +02:00
LoginCredentials Fix replacing external storage password during debug log 2022-06-13 06:18:18 +00:00
Notifications Update php licenses 2021-06-04 22:02:41 +02:00
Token Run session token renewals in a database transaction 2022-11-03 16:39:41 +01:00
TwoFactorAuth Only check the twofactor state once per request 2021-12-01 17:56:30 +01:00
WebAuthn Properly cleanup entries of WebAuthn on user deletion 2021-06-18 09:42:32 +02:00