sergehuber opened a new pull request, #932:
URL: https://github.com/apache/unomi/pull/932

   ## Summary
   - Public and GraphQL API key lookup no longer scrolls every tenant on each 
request.
   - Adds an in-memory hash→tenant index (same refresh pattern as the tenant 
origins snapshot from UNOMI-1013): load on first use, update on save/delete/key 
rotation, periodic and miss-limited reloads for other nodes.
   - Revoked and expired keys are refused at lookup time.
   
   https://issues.apache.org/jira/browse/UNOMI-1016
   
   ## Test plan
   - [x] `mvn -pl services -am test 
-Dtest=TenantApiKeyIndexTest,TenantServiceImplTest 
-Dsurefire.failIfNoSpecifiedTests=false`
   - [ ] Existing `TenantIT` API key lookup still passes
   - [ ] Manual: generate a key, authenticate on the next request; revoke and 
confirm refusal


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to