From c247a1e4596da4037cfa1df412422d566fe2ffa7 Mon Sep 17 00:00:00 2001 From: Max Lambrecht Date: Sat, 9 May 2026 14:00:28 -0500 Subject: [PATCH] fix(workloadapi): safely publish JWT bundle updates Signed-off-by: Max Lambrecht --- .../src/main/java/io/spiffe/workloadapi/CachedJwtSource.java | 2 +- .../src/main/java/io/spiffe/workloadapi/DefaultJwtSource.java | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/java-spiffe-core/src/main/java/io/spiffe/workloadapi/CachedJwtSource.java b/java-spiffe-core/src/main/java/io/spiffe/workloadapi/CachedJwtSource.java index 32b04db4..2318e63d 100644 --- a/java-spiffe-core/src/main/java/io/spiffe/workloadapi/CachedJwtSource.java +++ b/java-spiffe-core/src/main/java/io/spiffe/workloadapi/CachedJwtSource.java @@ -44,7 +44,7 @@ public class CachedJwtSource implements JwtSource { private final Map>, List> jwtSvids = new ConcurrentHashMap<>(); - private JwtBundleSet bundles; + private volatile JwtBundleSet bundles; private final WorkloadApiClient workloadApiClient; private volatile boolean closed; diff --git a/java-spiffe-core/src/main/java/io/spiffe/workloadapi/DefaultJwtSource.java b/java-spiffe-core/src/main/java/io/spiffe/workloadapi/DefaultJwtSource.java index 96e58057..ed5699fb 100644 --- a/java-spiffe-core/src/main/java/io/spiffe/workloadapi/DefaultJwtSource.java +++ b/java-spiffe-core/src/main/java/io/spiffe/workloadapi/DefaultJwtSource.java @@ -33,7 +33,7 @@ public class DefaultJwtSource implements JwtSource { static final Duration DEFAULT_TIMEOUT = Duration.parse(System.getProperty(TIMEOUT_SYSTEM_PROPERTY, "PT0S")); - private JwtBundleSet bundles; + private volatile JwtBundleSet bundles; private final WorkloadApiClient workloadApiClient; private volatile boolean closed;