nextcloud-server/lib/private/Authentication
Christoph Wurst c5922e67d3
Run session token renewals in a database transaction
The session token renewal does
1) Read the old token
2) Write a new token
3) Delete the old token

If two processes succeed to read the old token there can be two new tokens because
the queries were not run in a transaction. This is particularly problematic on
clustered DBs where 1) would go to a read node and 2) and 3) go to a write node.

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2022-10-18 08:28:22 +07:00
..
Events Update php licenses 2021-06-04 22:02:41 +07:00
Exceptions Update php licenses 2021-06-04 22:02:41 +07:00
Listeners delete files before cleaning cache when cleaning user files 2022-06-13 08:51:22 +07:00
Login Update php licenses 2021-06-04 22:02:41 +07:00
LoginCredentials Fix replacing external storage password during debug log 2022-06-01 10:31:19 +07:00
Notifications Update php licenses 2021-06-04 22:02:41 +07:00
Token Run session token renewals in a database transaction 2022-10-18 08:28:22 +07:00
TwoFactorAuth Only check the twofactor state once per request 2021-12-01 17:56:30 +07:00
WebAuthn Pass logger to passwordless auth WebAuthn lib 2022-10-03 15:03:23 +07:00