[infinispan-issues] [JBoss JIRA] (ISPN-10388) Optimize REST authentication

[Tristan Tarrant (Jira)]

     [ https://issues.jboss.org/browse/ISPN-10388?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Tristan Tarrant updated ISPN-10388:
-----------------------------------
              Status: Pull Request Sent  (was: Open)
    Git Pull Request: https://github.com/infinispan/infinispan/pull/7142


> Optimize REST authentication
> ----------------------------
>
>                 Key: ISPN-10388
>                 URL: https://issues.jboss.org/browse/ISPN-10388
>             Project: Infinispan
>          Issue Type: Enhancement
>          Components: Remote Protocols, REST, Server
>    Affects Versions: 10.0.0.Beta3
>            Reporter: Tristan Tarrant
>            Assignee: Tristan Tarrant
>            Priority: Major
>              Labels: performace
>
> The REST server doesn't handle authentication very efficiently:
> * it always checks for authentication even when it's disabled
> * it obtains the authenticated Subject from the realm on every request
> we should optimize it as follows:
> * move authentication to a dedicated channel handler which is installed only when enabled
> * keep the authenticated Subject in the authentication handler, as well as any headers required by the mech in use to quickly validate the request and skip interaction with the security realm for keep-alive connections



--
This message was sent by Atlassian Jira
(v7.12.1#712002)