[3.1.1 backport] JWTLastUpdated should only be modified when claim-based access changes

Description

authenticateJWTIdentity is setting JWTLastUpdated to time.Now() every time a JWT is used for authentication. This triggers an update to the principal document in updatePrincipal, which results in unintended sequence allocation and user doc mutation per authentication.

JWTLastUpdated should only be updated when one of the other JWT-related properties is modified on the principal.

Activity

Show:

CB robot April 8, 2024 at 10:11 PM

Build sync_gateway-3.2.0-350 contains sync_gateway commit ae62e7a with commit message:
[3.1.1 Backport] https://couchbasecloud.atlassian.net/browse/CBG-3129#icft=CBG-3129: Prevent unnecessary user updates when using OIDC claims to grant channel/roles (#6323)

CB robot April 8, 2024 at 9:31 PM

Build sync_gateway-3.2.0-348 contains sync_gateway commit ae62e7a with commit message:
[3.1.1 Backport] https://couchbasecloud.atlassian.net/browse/CBG-3129#icft=CBG-3129: Prevent unnecessary user updates when using OIDC claims to grant channel/roles (#6323)

CB robot April 8, 2024 at 8:53 PM

Build sync_gateway-3.2.0-346 contains sync_gateway commit ae62e7a with commit message:
[3.1.1 Backport] https://couchbasecloud.atlassian.net/browse/CBG-3129#icft=CBG-3129: Prevent unnecessary user updates when using OIDC claims to grant channel/roles (#6323)

CB robot April 8, 2024 at 8:21 PM

Build sync_gateway-3.2.0-344 contains sync_gateway commit ae62e7a with commit message:
[3.1.1 Backport] https://couchbasecloud.atlassian.net/browse/CBG-3129#icft=CBG-3129: Prevent unnecessary user updates when using OIDC claims to grant channel/roles (#6323)

CB robot April 8, 2024 at 7:41 PM

Build sync_gateway-3.2.0-342 contains sync_gateway commit ae62e7a with commit message:
[3.1.1 Backport] https://couchbasecloud.atlassian.net/browse/CBG-3129#icft=CBG-3129: Prevent unnecessary user updates when using OIDC claims to grant channel/roles (#6323)

Fixed
Pinned fields
Click on the next to a field label to start pinning.

Details

Assignee

Reporter

Story Points

Components

Sprint

Fix versions

Affects versions

Priority

Instabug

Open Instabug

PagerDuty

Sentry

Zendesk Support

Created June 21, 2023 at 11:53 PM
Updated August 31, 2024 at 11:01 AM
Resolved June 23, 2023 at 4:47 PM
Instabug