GetCurrentAuthenticationTicket() should not mutate DB state
Opened this issue · 0 comments
mtornwall commented
AuthenticationTicketService.GetCurrentAuthenticationTicket() should not mutate database state. Currently it deletes expired tickets and extends the expiry time. This quickly turns bad if an app (reasonably) assumes idempotency of GetCurrentAuthenticationTicket() and calls it during view model dirty checking.