I don't think its a performance problem as checking whether a cookie exists or not is very fast on the CAS server.
That said, you can provide your own implementation that implements the behavior you want. You can configure your own instance by specifying it in the "gatewayStorageClass" parameter. I don't even have a problem with this alternative being in the client source as another option (I don't know if there is a compelling enough reason to switch the default though) On Thu, Apr 24, 2014 at 5:37 AM, Michaël REMOND <michaelrem...@gmail.com>wrote: > Hello all, > > I want to discuss with you the thoughts Jérôme Leleu and I had on the > implementation of the gateway feature in the Java CAS Client. > > The current implementation of the gateway feature works as following: > - There is a unique boolean "gateway" in the AuthenticationFilter > indicating if the gateway feature is activated or not for the whole webapp > - If the user is not already locally authenticated and gateway is > activated, we redirect to the CAS server with the gateway parameter; we use > the gatewayResolver to not falling in a loop > - We come back from the CAS server and are locally authenticated or stay > anonymous > > I think we got a performance problem here if the user does not have a SSO > session because every single request will imply a gateway redirection to > the CAS server. > > I think it would be better if the GatewayResolver could be fine tuned i.e. > instead of just holding the fact that we tried a gateway redirection, we > could save the date of the last gateway attempt and retry after xx seconds. > This parameter could be of course customized by the application developers. > > What do you think? Is this optimization relevant? > > I am ready to submit a pull request if we agree on this enhancement, > > Any discussions welcome, > > Regards, > > Michaël REMOND > > -- > You are currently subscribed to cas-dev@lists.jasig.org as: > scott.battag...@gmail.com > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-dev > > -- You are currently subscribed to cas-dev@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev
