Tim Vernum 0981a469ae

Preserve ApiKey credentials for async verification (#51389) ...

The ApiKeyService would aggressively "close" ApiKeyCredentials objects
during processing. However, under rare circumstances, the verfication
of the secret key would be performed asychronously and may need access
to the SecureString after it had been closed by the caller.

The trigger for this would be if the cache already held a Future for
that ApiKey, but the future was not yet complete. In this case the
verification of the secret key would take place asynchronously on the
generic thread pool.

This commit moves the "close" of the credentials to the body of the
listener so that it only occurs after key verification is complete.

Backport of: #51244

2020-01-24 19:35:07 +11:00

..

cli

Fix windows newline issue in test (#51082)

2020-01-16 17:01:58 +11:00

forbidden

…

licenses

…

qa

…

src

Preserve ApiKey credentials for async verification (#51389)

2020-01-24 19:35:07 +11:00

build.gradle

…