search

appserver-io / appserver

A multithreaded application server for PHP, written in PHP.
http://appserver.io/
Open Software License 3.0
965 stars 104 forks source link

Remove LoginContext from GenericPrincipal #1075

Closed pathmissing closed 6 years ago

pathmissing commented 6 years ago

This PR removes the LoginContext instance from the GenericPrincipal, which is being stored in the current session. Not only because the LoginContext contains sensitive information like the password used to authenticate the user but also because it is neither needed by the ServletEngine nor by the application.

appserver-ci commented 6 years ago

Can one of the admins verify this patch?

appserver-ci commented 6 years ago

Can one of the admins verify this patch?