Always remove user from LTI cache.

harvard-dce · Sep 27, 2024 · 613447b · 613447b
1 parent b0e0131
commit 613447b
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/...ty-lti/src/main/java/org/opencastproject/security/lti/LtiLaunchAuthenticationHandler.java b/...ty-lti/src/main/java/org/opencastproject/security/lti/LtiLaunchAuthenticationHandler.java
@@ -396,6 +396,8 @@ public Authentication createAuthentication(HttpServletRequest request, ConsumerA
         logger.debug("Concurrent access of user {}. Ignoring.", username);
       } else if (!ltiRolesForUserCreation.contains("*") && !requestContainsMatchingRoles(request)) {
         logger.debug("No JpaUserReference will be created for LTI user {}.", username);
+        // Remove user from the cache; next time, the user may have additional/different roles.
+        activePersistenceTransactions.remove(username);
       } else {
         try {
           JpaOrganization organization = fromOrganization(securityService.getOrganization());