<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">That’s exactly my understanding.<div class=""><br class=""></div><div class="">Thanks for clearing the impact in case that client is deleted/origin removed.<br class=""><div class=""><br class=""></div><div class="">Thanks,</div><div class=""><br class=""><div apple-content-edited="true" class="">
Libor Krzyžanek<br class=""><a href="http://jboss.org" class="">jboss.org</a> Development Team
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On Nov 26, 2015, at 3:26 PM, Stian Thorgersen <<a href="mailto:sthorger@redhat.com" class="">sthorger@redhat.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class="">It can be cached. The contents is only the html for the iframe and doesn't check if user is logged in. The check if a user is logged in is done by javascript, which reads the value of the session state cookie.<div class=""><br class=""></div><div class="">The only issue with caching is if the client is deleted or the origin is removed the session iframe is still valid until it's expired from the cache, but I don't think that's a problem.</div></div><div class="gmail_extra"><br class=""><div class="gmail_quote">On 26 November 2015 at 15:19, Bill Burke <span dir="ltr" class=""><<a href="mailto:bburke@redhat.com" target="_blank" class="">bburke@redhat.com</a>></span> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">You can't. This request is done to determine if the user is logged in<br class="">
or not, IIRC.<br class="">
<div class="HOEnZb"><div class="h5"><br class="">
On 11/26/2015 8:57 AM, Libor Krzyzanek wrote:<br class="">
> Hi,<br class="">
> I’m wondering if it would be possible to cache all unique “.../openid-connect/login-status-iframe.html" in browser and then also on CDN e.g. Akamai.<br class="">
> I mean whole URL with all parameters “clinet_id” and “origin”.<br class="">
><br class="">
> This would greatly improve performance of website using JS client because Akamai servers content much faster.<br class="">
><br class="">
> I checked our instance and http header has Cache-Control:max-age=2592000 which is 30 days<br class="">
><br class="">
> Does it mean that we can configure Akamai to cache it?<br class="">
> When the content of iframe.html could change and thus it’s needed to be invalidated on browser cache and on CDN cache?<br class="">
><br class="">
> Thanks,<br class="">
><br class="">
> Libor Krzyžanek<br class="">
> <a href="http://jboss.org/" rel="noreferrer" target="_blank" class="">jboss.org</a> Development Team<br class="">
><br class="">
><br class="">
> _______________________________________________<br class="">
> keycloak-dev mailing list<br class="">
> <a href="mailto:keycloak-dev@lists.jboss.org" class="">keycloak-dev@lists.jboss.org</a><br class="">
> <a href="https://lists.jboss.org/mailman/listinfo/keycloak-dev" rel="noreferrer" target="_blank" class="">https://lists.jboss.org/mailman/listinfo/keycloak-dev</a><br class="">
><br class="">
<br class="">
</div></div><span class="HOEnZb"><font color="#888888" class="">--<br class="">
Bill Burke<br class="">
JBoss, a division of Red Hat<br class="">
<a href="http://bill.burkecentral.com/" rel="noreferrer" target="_blank" class="">http://bill.burkecentral.com</a><br class="">
</font></span><div class="HOEnZb"><div class="h5">_______________________________________________<br class="">
keycloak-dev mailing list<br class="">
<a href="mailto:keycloak-dev@lists.jboss.org" class="">keycloak-dev@lists.jboss.org</a><br class="">
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-dev" rel="noreferrer" target="_blank" class="">https://lists.jboss.org/mailman/listinfo/keycloak-dev</a></div></div></blockquote></div><br class=""></div>
_______________________________________________<br class="">keycloak-dev mailing list<br class=""><a href="mailto:keycloak-dev@lists.jboss.org" class="">keycloak-dev@lists.jboss.org</a><br class="">https://lists.jboss.org/mailman/listinfo/keycloak-dev</div></blockquote></div><br class=""></div></div></body></html>