2 Replies Latest reply on Nov 14, 2011 11:09 AM by matthew.hayes

Token Registry doesn't remove expired Tokens

matthew.hayes Nov 11, 2011 4:21 PM

We are running into an issue where after 5-6 days we are at 99+% of heap and GC starts failing. We have traced this to the DefaultTokenRegistry. It looks as if when a person explicitly logs out the token is removed from the registry however if the person just exits their browser the token is getting left in there. Since the majority of our users do this, after several days there is a lot of data in there.

Unless I'm missing something there doesn't appear to be any process running to remove expired tokens from the registry.

1. Re: Token Registry doesn't remove expired Tokens

anil.saldhana Nov 13, 2011 10:24 PM (in response to matthew.hayes)

Matt, can you create a JIRA issue for this, please?
https://issues.jboss.org/browse/PLFED

We probably need a timed cleanup of the registry. When tokens are expired, we should remove them (while logging them for auditabilty).
Actions
2. Re: Token Registry doesn't remove expired Tokens

matthew.hayes Nov 14, 2011 11:09 AM (in response to anil.saldhana)

Done, just wanted to make sure I wasn't missing a configuration somewhere

https://issues.jboss.org/browse/PLFED-249
Actions

Go to original post