Changeset 1750

Timestamp:

05/07/09 13:56:08 (16 years ago)

Author:

svonolfe

Message:

Fixed authentication bug (#532)

File:

• trunk/sources/HeuristicLab.Security.Core/3.2/PermissionManager.cs (modified) (2 diffs)

trunk/sources/HeuristicLab.Security.Core/3.2/PermissionManager.cs

@@ -50 +50 @@
    /// <returns></returns>
     public Guid Authenticate(String userName, String password) {
-      lock (locker)
-        if (currentSessions.Values.Contains(userName))
-          return GetGuid(userName);
       try {
         session = factory.GetSessionForCurrentThread();
@@ -63 +60 @@
         if (user != null &&
             user.Password.Equals(password)) {
-          Guid newSessionId = Guid.NewGuid();
-          lock (locker)
-            currentSessions.Add(newSessionId, userName);
-          return newSessionId;
-        } else return Guid.Empty;
+          Guid sessionId;
+
+          lock (locker) {
+            if (currentSessions.Values.Contains(userName)) {
+              sessionId = Guid.NewGuid();
+            } else {
+              sessionId = GetGuid(userName);
+              currentSessions.Add(sessionId, userName);
+            }
+          }
+
+          return sessionId;
+        } else 
+          return Guid.Empty;
       }
       catch (Exception ex) { throw new FaultException("Server: " + ex.Message); }