You are viewing a plain text version of this content. The canonical link for it is here.

Posted to oak-issues@jackrabbit.apache.org by "Manfred Baedke (JIRA)" <ji...@apache.org> on 2016/12/01 16:52:58 UTC

[jira] [Created] (OAK-5209) Save roundtrips to external identity servers

Manfred Baedke created OAK-5209:
-----------------------------------

             Summary: Save roundtrips to external identity servers
                 Key: OAK-5209
                 URL: https://issues.apache.org/jira/browse/OAK-5209
             Project: Jackrabbit Oak
          Issue Type: Improvement
          Components: auth-external
            Reporter: Manfred Baedke


When looking up group memberships recursively, org.apache.jackrabbit.oak.spi.security.authentication.external.impl.DynamicSyncContext.collectPrincipalNames() will call the ExternalIdentityProvider for each declared group membership just to retrieve the principal name for the given external identity. This is potentially costly and should be avoided, for instance by adding a getter for the principal name to the interface ExternalIdentityRef. Let's discuss options here.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)