[infinispan-issues] [JBoss JIRA] (ISPN-10388) Optimize REST authentication

[Tristan Tarrant (Jira)]

Tristan Tarrant created ISPN-10388:
--------------------------------------

             Summary: Optimize REST authentication
                 Key: ISPN-10388
                 URL: https://issues.jboss.org/browse/ISPN-10388
             Project: Infinispan
          Issue Type: Enhancement
          Components: Remote Protocols, REST, Server
    Affects Versions: 10.0.0.Beta3
            Reporter: Tristan Tarrant
            Assignee: Tristan Tarrant


The REST server doesn't handle authentication very efficiently:
* it always checks for authentication even when it's disabled
* it obtains the authenticated Subject from the realm on every request

we should optimize it as follows:
* move authentication to a dedicated channel handler which is installed only when enabled
* keep the authenticated Subject in the authentication handler, as well as any headers required by the mech in use to quickly validate the request and skip interaction with the security realm for keep-alive connections



--
This message was sent by Atlassian Jira
(v7.12.1#712002)