This issue has been created
 
 
OpenId Connect / cid:jira-generated-image-avatar-61ee058d-7081-4301-8c34-e2f930641a7c OIDC-271 Open

Abusive modification of the cached document

 
View issue   ·   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-f6b7ff34-be6e-4679-abc1-034dd47b0ef1 Josué Tille created this issue on 19/Feb/26 10:57
 
Summary: Abusive modification of the cached document
Issue Type: cid:jira-generated-image-avatar-61ee058d-7081-4301-8c34-e2f930641a7c Bug
Assignee: Unassigned
Created: 19/Feb/26 10:57
Priority: cid:jira-generated-image-static-major-a9bdb2cb-5877-4429-8ac3-cb111e66ae64 Major
Reporter: Josué Tille
Description:

Hello,

It seem that we have a "Abusive modification of the cached document" warning in the OIDC extension.

Here are the stacktrace that I saw.

xwiki 2026-02-19 08:11:57,158 [http-nio-8080-exec-960 - http://xxxxx] WARN  c.x.x.d.XWikiDocument          - Abusive modification of the cached document [xwiki:XWiki.Userxxx()] 
xwiki java.lang.IllegalStateException: Abusive modification of the cached document
xwiki     at com.xpn.xwiki.doc.XWikiDocument.warnWithStackTrace(XWikiDocument.java:9421)
xwiki     at com.xpn.xwiki.doc.XWikiDocument.setMetaDataDirty(XWikiDocument.java:2459)
xwiki     at com.xpn.xwiki.doc.XWikiAttachment.setMetaDataDirty(XWikiAttachment.java:558)
xwiki     at com.xpn.xwiki.doc.XWikiAttachment.setLongSize(XWikiAttachment.java:317)
xwiki     at com.xpn.xwiki.doc.XWikiAttachment.apply(XWikiAttachment.java:1336)
xwiki     at com.xpn.xwiki.doc.XWikiDocument.apply(XWikiDocument.java:9644)
xwiki     at com.xpn.xwiki.doc.XWikiDocument.apply(XWikiDocument.java:9512)
xwiki     at org.xwiki.contrib.oidc.auth.internal.OIDCUserManager.updateUser(OIDCUserManager.java:461)
xwiki     at org.xwiki.contrib.oidc.auth.internal.endpoint.CallbackOIDCEndpoint.handle(CallbackOIDCEndpoint.java:249)
xwiki     at org.xwiki.contrib.oidc.provider.internal.OIDCResourceReferenceHandler.handle(OIDCResourceReferenceHandler.java:164)
xwiki     at org.xwiki.contrib.oidc.provider.internal.OIDCResourceReferenceHandler.handle(OIDCResourceReferenceHandler.java:136)
xwiki     at org.xwiki.resource.internal.DefaultResourceReferenceHandlerChain.handleNext(DefaultResourceReferenceHandlerChain.java:79)
xwiki     at org.xwiki.resource.internal.AbstractResourceReferenceHandlerManager.handle(AbstractResourceReferenceHandlerManager.java:82)
xwiki     at org.xwiki.resource.servlet.ResourceReferenceHandlerServlet.handleResourceReference(ResourceReferenceHandlerServlet.java:160)
xwiki     at org.xwiki.resource.servlet.ResourceReferenceHandlerServlet.service(ResourceReferenceHandlerServlet.java:90)
xwiki     at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:658)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
xwiki     at org.xwiki.container.servlet.filters.internal.SetHTTPHeaderFilter.doFilter(SetHTTPHeaderFilter.java:66)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
xwiki     at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:610)
xwiki     at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:392)
xwiki     at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:321)
xwiki     at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:266)
xwiki     at org.xwiki.resource.servlet.RoutingFilter.doFilter(RoutingFilter.java:148)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
xwiki     at org.xwiki.container.servlet.filters.internal.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:212)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
xwiki     at org.xwiki.container.servlet.filters.internal.SafeRedirectFilter.doFilter(SafeRedirectFilter.java:106)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
xwiki     at org.xwiki.container.servlet.filters.internal.ResolveRelativeRedirectFilter.doFilter(ResolveRelativeRedirectFilter.java:129)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
xwiki     at org.xwiki.container.servlet.filters.internal.SourceURLResolverFilter.doFilter(SourceURLResolverFilter.java:177)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
xwiki     at org.xwiki.container.servlet.filters.internal.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:120)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
xwiki     at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:165)
xwiki     at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:88)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
xwiki     at org.xwiki.container.servlet.filters.internal.SafeRedirectFilter.doFilter(SafeRedirectFilter.java:106)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
xwiki     at org.xwiki.container.servlet.filters.internal.ResolveRelativeRedirectFilter.doFilter(ResolveRelativeRedirectFilter.java:129)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
xwiki     at org.xwiki.container.servlet.filters.internal.SourceURLResolverFilter.doFilter(SourceURLResolverFilter.java:177)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
xwiki     at org.xwiki.container.servlet.filters.internal.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:120)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
xwiki     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
xwiki     at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:165)
xwiki     at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:88)
xwiki     at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:492)
xwiki     at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:113)
xwiki     at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:83)
xwiki     at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:654)
xwiki     at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:72)
xwiki     at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342)
xwiki     at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:399)
xwiki     at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63)
xwiki     at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:903)
xwiki     at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1775)
xwiki     at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:52)
xwiki     at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:973)
xwiki     at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:491)
xwiki     at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:63)
xwiki     at java.base/java.lang.Thread.run(Unknown Source)

Note I didn't mark the affected version because I don't have access to this information, but I would suppose that it's the last version.