2.4.15.2dev fix branch for parallel token requests

Signed-off-by: Hans Zandbelt <[email protected]>
OpenIDC · Feb 8, 2024 · 2d96b48 · 2d96b48
1 parent c2f200f
commit 2d96b48
Show file tree

Hide file tree

Showing 4 changed files with 156 additions and 74 deletions.
diff --git a/ChangeLog b/ChangeLog
@@ -1,3 +1,11 @@
+02/08/2024
+- rewrite handling of parallel and refresh token grant requests
+  - temporarily cache the results of the refresh token grant for other (almost) parallel callers
+  - fixes handing on the same server, and improves clustered handling through a best-effort distributed cached lock
+  - improves handling of non-rollover refresh tokens since it avoids unnecessary repeated calls to
+    the token endpoint, unnecessary token issuance and possibly corruption because different tokens  "live"
+    temporarily in the same (conceptual) session in parallel before the session is stored (and the last one wins)
+
 01/31/2024
 - avoid crash when Forwarded is not present but OIDCXForwardedHeaders is configured for it; see #1171; thanks @daviddpd
 - bump to 2.4.15.2dev