Re: [keycloak-user] Authorization services performance

On Wed, Aug 22, 2018 at 8:38 AM, Ori Doolman <Ori.Doolman(a)amdocs.com&gt; wrote: If cache is warm, it should not happen any database hits. We cache not only entities (resources, policies, etc) but also specific queries that are executed during evaluation. In latest version, 4.3.0.Final, we delivered quite a few performance improvements to the evaluation engine like removal of redundant code and refactoring to optimize execution and decision cache on a per authorization request basis. We are still working on some other improvements as this is one of our main goals for future releases. I would recommend you to try latest version. There are other improvements too that I think you may benefit. Things like being able to define response format (if just a decision, list of granted permissions or standard oauth2 response), limit the number of permissions that the server should process, pushed claims (with or without permission tickets), additional methods to the evaluation api, etc.