Hi Jason,

As for the Username(or other custom) security TokenManager, the WSE runtime
will reuse it for multiple requests(it will cache it in a security token
collection at the server-side). This does be a by design behavior based on
the implementation of WSE runtime. Therefore, I think we should not store
any private data(instance specific ones) in Tokenmanger's properties.
What's the data you want to store in UsernameTokenManager currently, would
you consider storing it in some other shared place and add thread-safe
protection?

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead

Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
msdnmg@microsoft.com.

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
From: =?Utf-8?B?SmFzb24=?= <Jason@discussions.microsoft.com>
Subject: Quetion about WSE UsernameTakenManager
Date: Fri, 11 Apr 2008 11:38:02 -0700

it look like WSE 3.0 is reusing the TokenManager instance between calls to
the webservice. Is this by design?

I created a custom tokenManager by extending UsernameTokenManager and added
a private field for my custom user object.

This field seems to get corrupted when mutliple calls try to authenticate
agaisnt the weservice.

I can't find any documentation saying that this code needs to be thread
safe. Is this a bug?