login_api::logout
API does not clean up registered API sets
#2618
Milestone
login_api::logout
API does not clean up registered API sets
#2618
Bug Description
When
login_api::logout
is called, orlogin_api::login
is called again but failed, or succeeded but the new user has access to fewer API sets, ideally, we should clean up the API sets that the previous user registered but is no longer available.However, the shared pointers to these objects are already saved elsewhere (in FC), so we are unable to clean up.
That means the API set IDs for the registered API sets are still accessible even if the new user should not have access to.
bitshares-core/libraries/app/api.cpp
Lines 80 to 83 in 8c93d58
bitshares-core/libraries/app/api.cpp
Lines 91 to 93 in 8c93d58
Impacts
Describe which portion(s) of BitShares Core may be impacted by this bug. Please tick at least one box.
Host Environment
Please provide details about the host environment. Much of this information can be found running:
witness_node --version
.CORE TEAM TASK LIST
The text was updated successfully, but these errors were encountered: