X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=security%2Fruntime%2Forg.argeo.security.core%2Fsrc%2Fmain%2Fjava%2Forg%2Fargeo%2Fsecurity%2Fjcr%2FOsJcrAuthenticationProvider.java;fp=security%2Fruntime%2Forg.argeo.security.core%2Fsrc%2Fmain%2Fjava%2Forg%2Fargeo%2Fsecurity%2Fjcr%2FOsJcrAuthenticationProvider.java;h=2eadf5669724e5f7cb6000e2819f766f929e72c5;hb=c813b98b8339977ff0fb5f6209b54e5852d3ff6e;hp=dc47fa3831b3afc6b6f26b177e22665f017a49b4;hpb=da55282938aaebf9fa148454dbc8add9c558501f;p=lgpl%2Fargeo-commons.git

diff --git a/security/runtime/org.argeo.security.core/src/main/java/org/argeo/security/jcr/OsJcrAuthenticationProvider.java b/security/runtime/org.argeo.security.core/src/main/java/org/argeo/security/jcr/OsJcrAuthenticationProvider.java
index dc47fa383..2eadf5669 100644
--- a/security/runtime/org.argeo.security.core/src/main/java/org/argeo/security/jcr/OsJcrAuthenticationProvider.java
+++ b/security/runtime/org.argeo.security.core/src/main/java/org/argeo/security/jcr/OsJcrAuthenticationProvider.java
@@ -32,8 +32,9 @@ public class OsJcrAuthenticationProvider extends OsAuthenticationProvider {
 		final Repository repository = getRepositoryBlocking();
 		systemExecutor.execute(new Runnable() {
 			public void run() {
+				Session session = null;
 				try {
-					Session session = repository.login(workspace);
+					session = repository.login(workspace);
 					// WARNING: at this stage we assume that teh java properties
 					// will have the same value
 					String userName = System.getProperty("user.name");
@@ -41,11 +42,13 @@ public class OsJcrAuthenticationProvider extends OsAuthenticationProvider {
 					if (userHome == null)
 						userHome = JcrUtils.createUserHome(session,
 								homeBasePath, userName);
-					//authen.setDetails(getUserDetails(userHome, authen));
+					// authen.setDetails(getUserDetails(userHome, authen));
 				} catch (RepositoryException e) {
 					throw new ArgeoException(
 							"Unexpected exception when synchronizing OS and JCR security ",
 							e);
+				} finally {
+					JcrUtils.logoutQuietly(session);
 				}
 			}
 		});