[keycloak-dev] Slow Direct Grants API endpoint

[Stian Thorgersen]

Direct grants are expected to be a little bit slower in 1.1.x due to the requirement to persist more, but should certainly not be seconds.

Can you give some more details please? Including

* What DB are you using?
* Are you using mem, infinispan or jpa user session provider?
* Clustered?
* How many concurrent requests/users are you testing with?

Any more accurate performance stats would also be helpful

----- Original Message -----
> From: "Daniel Baxter" <daniel.baxter at cira.ca>
> To: keycloak-dev at lists.jboss.org
> Sent: Monday, 12 January, 2015 9:23:42 PM
> Subject: [keycloak-dev] Slow Direct Grants API endpoint
> 
> 
> 
> Hi,
> 
> 
> 
> I am attempting to integrate Keycloak into an existing application to replace
> the homegrown user management system in place. We have a new project built
> from the ground up on Keycloak 1.0.4.Final which is exhibiting good
> performance. However this app that I am porting has a remoting component
> that connects to the server with bare username/password credentials over the
> EJB Remoting framework. I was hoping to use 1.1.0 (currently Beta2) which
> provides a DirectAccessGrantsLoginModule which does exactly what I want
> (turns username and password into a KeycloakPrincipal). However, the turn
> around time from Keycloak is on the order of several seconds.
> 
> 
> 
> I have used a bare REST client to execute the POSTs to both our 1.0.4
> Keycloak and 1.1.0 Keycloak instances and have noted an order of magnitude
> difference in getting a response. Is this a known issue (I cannot find
> anything in the public bugs/tasks list)? Or is this due to the Beta status
> leaving additional performance affecting logging or instrumentation in
> place?
> 
> 
> 
> Thanks,
> 
> 
> 
> Daniel
> 
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev