Juju: In-Memory Token Store for Discharge Tokens Lacks Concurrency Safety and Persistence
Summary The localLoginHandlers struct in the Juju API server maintains an in-memory map to store discharge tokens following successful local authentication. This map is accessed concurrently from multiple HTTP handler goroutines without any synchronization primitive protecting it. The absence of ...