realulim commented on issue #844: Add new explicit authentication-tokens that 
can be revoked
URL: https://github.com/apache/couchdb/issues/844#issuecomment-478301195
 
 
   I was assuming that the epoch value (what I called a timestamp) would be 
updated every time the stateless token was refreshed. That could lead to a 
situation where newer tokens were already given out, but one of the nodes in 
the distributed system would still have the old epoch value stored for the 
user. But you would want requests against that node to succeed with a newer 
stateless token.
   
   That way the per-user epoch value could be eventually consistent in order to 
not affect scalability.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

Reply via email to