search

linksmart / go-sec

OpenID authentication and rule-based authorization for Go
Apache License 2.0
2 stars 0 forks source link

Client caching in basic auth handler is not thread-safe #4

Closed farshidtz closed 4 years ago

farshidtz commented 4 years ago

The client caching code is not thread-safe: https://github.com/linksmart/go-sec/blob/7515a66dd5b68df214cc799f0f7d935f538f207d/auth/validator/handler.go#L107

Moreover, it can cause exhaustive memory consumption.